last executing test programs: 1m44.009724526s ago: executing program 1 (id=89): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x5000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m43.923346677s ago: executing program 1 (id=90): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x4, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r2, r3, 0xe, 0x59c4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84101, 0xae) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) 1m40.792631046s ago: executing program 1 (id=128): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200000, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) fchownat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xee01, 0x0, 0x1000) write$FUSE_INIT(r1, &(0x7f0000000740)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x2000, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x11, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m40.718042928s ago: executing program 1 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 1m40.692191869s ago: executing program 1 (id=130): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r2) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r3, &(0x7f0000000580)="0102", 0x2) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 1m40.62202632s ago: executing program 1 (id=131): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0xfffffffffffffffe) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sigaltstack(0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x5, 0x2, '\x00', 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0) 1m40.561788781s ago: executing program 32 (id=131): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0xfffffffffffffffe) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sigaltstack(0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x5, 0x2, '\x00', 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0) 1m24.717744052s ago: executing program 3 (id=292): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket(0xa, 0x3, 0x87) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@private1, 0x18, r3}) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @private=0xa0100ff}, 0x2, 0x0, 0x2, 0x1}}, 0x26) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x6, 0xfffffffe, 0x4, @private1, @private2, 0x1, 0x80, 0x2a, 0x4}}) 1m24.715511082s ago: executing program 3 (id=293): recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe28, 0x4, @mcast2, 0x7}, 0x1c) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000"], 0x138) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={""/10, ""/2, @empty}}}, {{@in6=@private0}, 0x0, @in=@remote}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}, {@access_user}, {@cachetag}, {@afid={'afid', 0x3d, 0x7}}]}}) 1m24.664442743s ago: executing program 3 (id=294): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xc, 0x0, &(0x7f0000000040)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 1m24.544453776s ago: executing program 3 (id=296): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) dup2(r2, r0) 1m24.464251187s ago: executing program 3 (id=297): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1}, 0x2}], 0x1, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) 1m24.268837331s ago: executing program 3 (id=298): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000002100090002000000ffdbdf2502000000590001002f6465762f726e6c623000e1b679e7a3d36f8a84b7407e5ab474871987a67580e481ade7"], 0x70}, 0x1, 0x0, 0x0, 0x24000810}, 0x4000) mount(0x0, 0x0, 0x0, 0x8241b9, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0xa0001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m24.218924331s ago: executing program 33 (id=298): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000002100090002000000ffdbdf2502000000590001002f6465762f726e6c623000e1b679e7a3d36f8a84b7407e5ab474871987a67580e481ade7"], 0x70}, 0x1, 0x0, 0x0, 0x24000810}, 0x4000) mount(0x0, 0x0, 0x0, 0x8241b9, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0xa0001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m15.256130252s ago: executing program 2 (id=425): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000f9a000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x54, 0x8, &(0x7f0000000380)=[@flags={0x3, 0x18c244}], 0x10000000000000c5) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m15.111430284s ago: executing program 2 (id=430): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$TEAM_CMD_NOOP(r0, 0x0, 0x4000000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x11, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m14.932118218s ago: executing program 2 (id=434): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @ioapic={0x2000, 0xb, 0x9, 0x1, 0x0, [{0x8, 0x5, 0x4, '\x00', 0x8}, {0x2c, 0x0, 0x70, '\x00', 0x17}, {0x91, 0x8, 0xbb, '\x00', 0x4}, {0x8, 0x4f, 0x5, '\x00', 0x40}, {0x2, 0x78, 0xb, '\x00', 0x4}, {0xdb, 0xfb, 0x6, '\x00', 0x91}, {0xfb, 0xa7, 0x5, '\x00', 0x7}, {0x6, 0x3, 0x7, '\x00', 0xf9}, {0xf4, 0x9}, {0xf7, 0x0, 0xf, '\x00', 0x5}, {0x1, 0x1, 0x0, '\x00', 0x9}, {0x28, 0x9, 0x6, '\x00', 0x2}, {0x9, 0x84, 0x9, '\x00', 0x7d}, {0x47, 0x20, 0x40, '\x00', 0x7f}, {0xc, 0x4, 0x0, '\x00', 0xfc}, {0x1, 0x9, 0x0, '\x00', 0x6}, {0x6, 0xa}, {0x9, 0x1, 0x6, '\x00', 0x4}, {0x2, 0x3a, 0x6, '\x00', 0x23}, {0x7f, 0xfb, 0x48, '\x00', 0x1}, {0x7, 0x8, 0x0, '\x00', 0x4}, {0x9, 0xff, 0x5, '\x00', 0x7}, {0x7, 0x1, 0x3}, {0x9, 0x1, 0x9, '\x00', 0x6}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x5, 0x7, 0x5, 0x180, 0x0, 0x0, 0xf1, 0xb64f, 0x8, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd5], 0x2000, 0x3c4212}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4080, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48080) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 1m14.771844611s ago: executing program 2 (id=437): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) setuid(0x0) 1m14.704333892s ago: executing program 2 (id=438): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a5, 0x2000000000003ff, 0x2], 0x0, 0x200306}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m14.324490529s ago: executing program 2 (id=441): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 1m14.30284314s ago: executing program 34 (id=441): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 2.750751328s ago: executing program 5 (id=1926): prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x400, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}, 0x179}, {0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0xffffffffffffffff, {[0x8, 0x4, 0x6, 0x6e, 0xfffffc01, 0x2, 0x6, 0x7]}}, 0x5c) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) 2.734481158s ago: executing program 5 (id=1928): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@in_dx={0x82, 0x20, {0x123, 0x2}}, @out_dx={0xaa, 0x28, {0x456, 0x4, 0xffffffff}}], 0x48}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x183903, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) preadv2(r4, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r8 = open(&(0x7f0000000200)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r8, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80203, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x20) fcntl$setlease(r8, 0x400, 0x0) r9 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r7, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r9, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r9, 0x2) 1.903648694s ago: executing program 6 (id=1954): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) 1.876682905s ago: executing program 6 (id=1955): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x14}}, 0x0) r0 = openat2(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x200000, 0x12a, 0x2}, 0x18) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x240, 0x9b9a}, 0x9, [0x6, 0x9, 0x5, 0x9, 0x700000, 0x155f, 0x6, 0x5, 0x25cc, 0x1, 0xa5, 0x6, 0xa2b9, 0x1000, 0x0, 0xe4, 0x9, 0xfc000000, 0x6, 0xbbf, 0x5a732f64, 0xc, 0x9, 0x12, 0x2, 0x80, 0x4, 0x1, 0x2, 0x3, 0x7, 0x81, 0x28000, 0x5, 0x0, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x4, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000000, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0xa], [0x9, 0x3, 0x6, 0x0, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x761e, 0x9, 0x4, 0xaca, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x4, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xfeff58b7, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x4, 0xf1, 0x4, 0xab00000, 0x40000005, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x8, 0x3, 0x4, 0x6, 0x7, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xf0b, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000005, 0xb, 0x7, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x240, 0xd, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x200, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3433, 0x3, 0xa6, 0xfc, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x1, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x8, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fbfffff, 0x7, 0x4, 0x10, 0x81, 0x4, 0x9d86, 0x9, 0xfffffff7, 0x20008, 0x40f1, 0x2, 0x1, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x80000002, 0x624dfaee, 0xc, 0x7f, 0x201000, 0x5, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0x4000000f, 0x2, 0x5337, 0x26d, 0x9, 0xfffffffb, 0x4, 0x80, 0x9, 0x4, 0x463f, 0x4, 0x7, 0x3, 0x8, 0x13ffd, 0x1, 0x1b1a]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x40044}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfc, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0xff}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x7fffffffffffffff, 0xfff, 0x0, 0x180, 0x1, 0x7d, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x800, 0x0, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.832467626s ago: executing program 5 (id=1956): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x9, 0x4) recvmmsg(r0, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40002006, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 1.626582639s ago: executing program 6 (id=1960): syslog(0x4, &(0x7f0000005480)=""/85, 0x55) (fail_nth: 1) 1.304793536s ago: executing program 6 (id=1962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$getflags(r1, 0x401) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x677}], 0x1b, 0x40002122, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x240000c1}, 0x4048814) 1.223902917s ago: executing program 6 (id=1968): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="70d566f3440f09b083410fdf3f017571b805000000b95ea997c00f01c13e0f0015000001008f4978d1812e4b00006466460f78c7f08a", 0x36}], 0x1, 0x7d, 0x0, 0x0) (async) socketpair(0x18, 0x6, 0x7, &(0x7f00000005c0)={0xffffffffffffffff}) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'sit0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x80, 0x80, 0x8, 0x8, {{0xc, 0x4, 0x0, 0x1, 0x30, 0x67, 0x0, 0x3, 0x0, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp={0x44, 0x8, 0x1e, 0x0, 0x2, [0x7]}, @generic={0x94, 0x11, "8aaf7c63d59c925845a6d0b638a575"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00', 0x0}) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000940)={0x8, 0x0, [{0x306, 0x0, 0x7ff}, {0xab8, 0x0, 0x5}, {0x0, 0x0, 0x9}, {0x22c, 0x0, 0x2}, {0xacb, 0x0, 0x8000000000000000}, {0x955, 0x0, 0x8}, {0x8a6, 0x0, 0xd5a64b2}, {0x37e, 0x0, 0x7ff}]}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000780)) getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000880)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000000900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000001f40)={0x608, r8, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x9c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/nullb0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\x80/%\xc7\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x22c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x401}, @ETHTOOL_A_BITSET_VALUE={0xc8, 0x4, "197a1edd754fb9cfb58af579362f391c5613f2641f2c2a3fb9e39b857f219d5cb02afa353206a45458a68b4b1babaacb2c4944202c509e21f729c674c928f60c6b5805c5cb9f69dfddddc917a80d4354baab7c17c4f9301973fbecc6eca2d6244b49769d722a4339bd43c4c87a64a8f45dff4fd28db9d366dc0fa778bbe63050c8e7572486dc3dd9354e67e3091bf9547f2eb49f3e05c8cad69a01c6d5662305a5f6cc8d75108955de3cbc6309be7c7c517b5dde0ee81acda8d9a173013fba7b835f516e"}, @ETHTOOL_A_BITSET_BITS={0x154, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-{)[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder1\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '[*+@@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%:\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'cramfs\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf351}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '}$/)*$$.{\'{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x98c8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x6e, 0x5, "40c057e40362a8ab81a2a268da0f5c9a27f9520fa20ad2883004ca802d43e77dffb45883b3170de78fe6348103931ba1fe9338f808410567fca52bb4eebb254a85d388695befaeb2a7fac74e1c97009c1c6bc767de115fadb271e3069750c6c8cc90b1be9145882aa03b"}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_VALUE={0x90, 0x4, "0507054323af06bde6cf961432581ae020359562c33f19701c176c17f9ca9b4725fff9568719a85e4b321afa946089da7ec1980e0a61e3ae4c1387e848fd3a8e74567ce4a1c69e42183c66fc8e17fb52409c81152446820f5c2cce15201e26654ceefbb557956b11a01e59881d364211cd581da9fb4c8e2c70672f0a6af976e5cdb1fdaf894802b7719eec7c"}, @ETHTOOL_A_BITSET_MASK={0x3a, 0x5, "0c83d405dadbc08ab5e0cb20cb1525ab92c896cb4f1f5796a6baaadfcd0c17e890ad20c703427997aca51d3683cf6d4af0624cdc7daa"}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x27, 0x5, "e5a5a9dcda4893e6aa04e5f44c79af06e16d183be8ea2bd82ac4625b8d272d4ac28eca"}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}]}, {0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'cramfs\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, 'user.incfs.metadata\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder1\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x34, 0x4, "5dbaef9264082751e78f6de1b2c468892bd861c7d940ad49a838ce1f3d5841f601f72573666eb85e94c48123d26b5ba3"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x608}, 0x1, 0x0, 0x0, 0x80}, 0x10000800) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000001b40)={"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"}) mount$incfs(0x0, 0x0, 0x0, 0x1010040, 0x0) (async) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) (async) setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) (async) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) (async) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) process_madvise(r12, &(0x7f0000000500)=[{&(0x7f0000000040)="9bf1eea0ae896f6083691ecfbda789", 0xf}, {&(0x7f0000000080)}, {&(0x7f0000000100)='*', 0x1}, {&(0x7f0000000140)="1a5184f7a9c25da39efe2ed4987dcb54818fb3a2ed286ee5b432780d777d8ce096f35b12e1b867413950ec990c4832b3e18e9b2fb1b1b33baa707bf2dd37905643e6a2304fa55822aaf1c4cd0e4e4691f0002ac4de6bb02993c29a529fbeda7dd8b0a2afd5bda9fb73eb69ca97993fee52833dc03c646d73b107872f393b6d1ce85e047ac8d75113dd0537f9c67ac1f48a395ebbdb923b2207c1e5a6da86e5ee6675e7d6b27f8f1c2e441bb4cc5511d4a732251f6a10fb97022ca57698569796f310ecdaabfbc977b29d6362ce6fc929da31cdf11dc8", 0xd6}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000000240)="e6e61b5e99b07beff07539b4e44ab995690ad3d79e60b5bfc34e2ce865112f7fd2107b3663909a533b4418131826c3cd1667831d41b63e60e5b8a343173702b430390f2ecc241040b61bde70861bc2560aed2e7cd8bdf4fd1b5f0655f85fe23f87904364606fe02852ca8a3357551e6e", 0x70}, {&(0x7f00000002c0)="22bf9e4bb5d383b938e97d142da63fef011cf9e9330114707ccb07fc17038fa24610e6ea0335798f8d040cd1b73666e124d6a3bf3e34df115fa62789d06c8cb76eddc6f73750754a934f5bb28aefac09939b3cd9f9a8f1f697281d726fc4caba819ce5ba5b6a73f4417c892dc2b48a088f38bf744e578e0ed61ce2b2298dbbae52d50c6bc42446a84ab6c5054a3afefa9994a70ed28fc60bb327923ac80a65614be3bd0a97779e6eb394b18657920413e901fc21f85ba705bfa2f78364fb597ca808765a3c1fbf6ddd00a214044c3aaa97dbd267818941748b9a16959541d2f9bc65a79c46ef24797e019f94167428ad961fec2e", 0xf4}, {&(0x7f00000003c0)="5f829bb74233d05c0a7a0577b962b4ed3739ff8f02711c60dca22083f54fb031623845e7cc036dd50afc69a13d623710af81b3db20bad65203627cc46ce9946a6946c08b378f2669a9f304f24cfbb1e2fbd98de76d6d3e57d278ee814609ff478d00056c4191f18ba9d64a5ff7801aea384175cbad3b710a90e0563e43f3", 0x7e}, {&(0x7f0000000440)="0f91a4900ff3d2478cf804e13030bf4058e02fba5272ea491fb0152ebd7af0a86bd8e55ee39f34fe89dbd9d6a50fc973aa20eab6561538fab3aebeae02228cb547e5981f6d6ca99eb981c4348eb6c46cd2e092435cc77ce31af92c82333b1925f8c8cc19ad849ed8806cb8f93a3fc50eb84d6a867b7b5c30936de0978cbc28d95dc8ba35fe2147ff4bf7d4ab", 0x8c}], 0x9, 0x4, 0x0) listen(0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1.114122339s ago: executing program 6 (id=1978): inotify_init() mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0xcb1f, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_tcp_buf(r2, 0x6, 0xb, 0x0, &(0x7f0000000100)) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0/file0\x00', 0x228080, 0x0) syz_fuse_handle_req(r1, &(0x7f000000a200)="c1fd43b601662701272af37a7deda072caa09faa11b0a4ef2825e87f09fb6bc3dfd84ddd853b18203bbf08b1af6066c78b4714a789a8f3605f5920e7afc5b0a04271cebce72a797abd5b9e4a44fdcc150e6ef0e8c3d4360e74275818df26243f28cac3d84e264fd0c77d4bccbc466e7244b247d9dcee026df89aefc958d84a55d4d6922d96ce0349fe28efd6b83d15b7b08143a721c4a677b72362a49eeb15ec5b5f8569bad585e30a62ab149e7e4c7f49af9560fd52ea5730135dc3ea3f6a9a3ae6286e99e1520a43b8813ca6aad1adbb30b2459f90699e2ba3a6335ddcace3737ed8f5f21e027ac2b224389bf0c8c005ac8d8c3ae188679d34da0a2c20a910487d3c91b18770fa5ee483a3f09b882960f12e7d2eb9015895ce80b37f74a305a50deb146b1c3430f31d28e6f827b9c7070bc880d251ddb09e0e70a0512ed2600256332c43a5deaecb01f089333fc3b6721f6ed5b41f9971b7c63f57b5afa8042f5beb1ac1274676dc5406b5828247123bb7be795baee59d779bbde227c90d0a5d863936d434f2ce7a45f9b650600f32827b92e2d828915f0411f765ed82dd012561ed29b09950b96f8e490f1448dbd5e45bdc92a2a36aa67e5e9396b6376f82aa6915eac4144a102de786563e4482f0917698bc70776f8c7aad3346e18ee295af54f3c1658f9b124116a2fdac79353b095cf667dd941c3cba141b3ac8982eed42e7db649c9d49a59378216bf4323ff4c2f2992994d4144b74866a2426e19a2dc8dbf4643f97a214fc9c448512316d76c4116c3ae600dfb98cf85472da661745b638438dbf15d8dd87a8ba35205a65ba5bf79cf941454f8c788dc2eeccea412add734798c82e9c86122a91dff778edcd309c05fdca66176e9bc4d410b0ee4627eb889443b574ce205c7f4d6d428e909952712ec3dfc89552279b2da87b010051a451377a0c51a34ebba25c3b62ba98eb6f1549b0fee6a7c5e0c7a72835388803a0a8342bb9f2733224c92a50dd25a9b335f243f2d8c68142aa1db1de2f899a56c623a32f8a74c16db56983eb83f6469316f2fc14860c075236a3ba40e8c265909b8fc6b03c6378269f6629bab81418789cd748d8b786f47ab8f13b0caa5ecd79dbea61330be6de5804f5c211cef78f555e7b2093f4a836cdb8a2cfa261be14e0f59d075f58e97ba16cb130f062a2261df244c57d6f477d761262b2e755c96bad3898894e80b23fae71fc31b2895513a11b0cf07551ca87325592dd10549b7d92da1cb07119fe970b8cc3aacc386ab64d32b308679593256d2fcd1f9e9b15ee93ef859e7268be776053182460e83fb873711226ec9aa5c35b15fbfa12ea0abfc7465b300bd8445c831ae77d2aab7d4bc3ba5f218fda9e90eacde1ac5119eb30073a6f291727cb94fc87a3d3013f3ebb1cd259067c571bd3c57eacce716e61f86bf4041bacadd6c676e17fb3cf89c4984aec78216854a60af68533fcdff12897c3e1b2c10cec019722623f477a512c4e5eef74a6d1ab7a735905373ca3a0b18c3eaa523c86238fba77e45aa07c1b96fa1e3ceb04e5f4742536b687ebf989918f6805cda9611ab9ed10ee33cda71a95be2da0d2c21d2295fdb334dc2057942382dc7d0f70300df3df84cf9a18f042c11243a347569771f9b82404e13684324fb06d867641c87d6d70ad15e90240f901d04a8b8c7fdfb8b84aefee1606f14a2a6995e6b8aaee1b372cd586a6daf28ad7d8ef644c58fa72f0b2f847eef72e18f1a4374c4fa3d604a9bfec6a1a4fefdfaa848279693208dfbc1dbb97b44c4f034090606e0ad312cdfb6a8f68dae7312b064c68813eb41992559ca63d88a8e90711c838f220a4da5bc7d82ec0af83da059bdccdb524a59ad26e43413f131e7703eb82158293a331456ce728c28923bf9ae644a331a667c2932ae1f11a9f9b893f802796ad029c40496c9bc49cdf41a40da1092b404da660e80f33a6012a407805e70f9a180105cd0401ed01a9f6edef4e2479e1579ea365d843c197279e3c79ae56a107dfaba6af80ed9a24d535d19827596ca2b14bf4b110fae4820fc8d0570a64ae08e315da0091f766bceb1fc990465ecb84a2d72efcb9a269816863b72f8d0869b20c14bd72f909fc3ebbf2ba2f98ce3fd7eb54b738692916eeb98ab9ea04ce3e740817dc9ac6561c71d3bc15358ebbb3027294f66eb890577f8a63ecd23beacd93c3b1498d5eefd8b68ebab3536653d5839713b07f79ebb2a6106c009cc535a2173cde3ccc65676bcae513145db5bf08546e8810fb4d193266d491fb9121935138a74c52149959a0c270cd6e244dd7cb140fcf6bf0e7536220f798bf32cda564ebde025a92617f3195e549a491a45446ff0ebfd3b047775af339e59a8da0db6223339325c6f493baa5f2c71b5710a975def3e3919a24a52351acc12e5a2ab6c171705bad0e6afd0ad2b6dd6feaedc9924fdba533fc958fab9a980b775eb4c93a499413073cf09826381b8054f9f09f4a0dfa63ac2f6cb22d001ff277ec7f493bc54d2d1d34a6dad62cd7bccab2ecd419c90087f6945311460b87daad605ff8519aba1d8311a5e565dd26655577aa13da31e01cacbb7e10e720a486e9cc450b8a21d23aeab42838d81dc05f5be0474ab81b806fe71b888323037f3262179e451f765e419bddf7b7a99b40bcc226986efbd3765b66e56a3500de4b18b676361510bd35b3a9c6b8c08222cf7a73c4cda972190f839c2d01a4c171a803c0a77d2769c892b2f0191d2fa01d7d5ca53573e47e93ca9b56b8f0d684d5458d505ad8383f22e19024da06bf6abf30ed663cfb33e202be17bb951e9ea30cfcf65675d2fc64aa51e07237fe8391549185fac5822daa92e73778e080b1304dd757f9035092a729b9a0122d1c07d60336f18a9e46ebeced1041de2e2e8a5de6f4a814d5179bddfcdeda88888cb9ce322a516af3be2b7cf371e9193cb40e66cd41dd94e37f14c6e6469e8fa6c57a4fa3125fb6819b84e276768a7354dd3e2692a77a4a60af85bec0325d0aae72a5f4f7bf9468f1d35147910a55af546e4e3634fe2d8efe116606bf84c0e9c4d442ec8f99fe6c1cc90b99a8d1e53322b26b66928fd01738fa70c0aff84b4f02946c6fa684bd617667857cd751a3ad3d324f9574af78eec6c8c51c25e01cb0ef129199f5a3b3b29e32a34c4ef14c810c2e69e06158f02033e15f1ec00419a91c1450338956a188fac918fb73692491baaf5976ca392c139ba0e551de260dfd6c733b572215f2af0aacc5709b0d4a3b36d23f5882c5644bb455075c5c48bd50492b395d14c36393019fa9eab8a211d71d173754663ea2af1ebdf9751006792609d4db47824d95d68583c922c04af3cdfb58f37b6f958a4b35cbd74a30a393be192fb46bfe4e722c3634c94fbf4829f25dc0b8b07cd16cf4c7e924eb02ae8d675539d32b5d9a54a43811eb98e2db317c67d5bc62901582cbb128542d6be3bc9a5b5b8a8827f2eab15e82b28b411edf67d786b76feed9e7d5ffbc86fbdb19ed80a4f5dcebd631719f8734c398938047011a251370e40d5929e9b4426081029b1339ccb08bb0dbcbb4eedd53792e43a046abc1d5c1dc8c1749052233e18e25593daee94f77f327de61867f1e791b797cc5ee43f8109cb0654d8742ece8512c322442f63dff88702ba047e8370a1b7304536ee7cf465a0a19d965fd03543b991449d6a1a98be5ec3867314c688c5c487e59a6bb05291fda479827172bf3db615c20ea022ff7b16020299220b7c45a7181c1eda48c9a5fa7624843d112c52d99d0b27e168eeadbcd3c60b3f366175decc8c91c64a0a16d3a2e38244dd8d2de806ad741e2256075efcb0466360acaa3f65611789a821c30a13d4b60e44173be9e288dda7d7aae2f8341d9a85104170631c942eef22c10e903bf70b0ed36831d536a0cd65c11a209e37a76f3f54deb326735bec5a532431a81f303af5e9d03717a93a3da18317c459aee8db08b9f0b3331d29770fe7fc4266c15a4294c9c435a38296cd880dcedb34f63037f2a8e3ada9ead3e52abd69e5779905f82a607f70e351d2167bf1b599cfb9314a37df876bd5f2acff82f1773c512ffd308179e47b26946ebcce112273e12895145ec88c701269c93f32a5ab2bc16acd57e997d140d18c2cbed2601a05ec33a63e7edbcca673f71eecab66af5287d7d5a1dad68771ed612d29ef8ab23ef0211b4bbed6f981cd24d652f355d94f6003b01cf3d803a6e36b470402c05816aa2cd747f293300bbe891854d932df7809c7809c2cc3d06c693981e7bc21e89aa3ea8f8829c85185e4ecfd2e293bfa2b88cae2c9e4722b9cfee01911a502d59360532528661eadf2150e26a2992871f562d6fed4a36867b2521b1778c4ce955f5980b9dd9ede42fc4a1394491ebf1c1fb0d794cb8c28b103d76b2e70b0337877a222d7f3cd61f353baf7bc9e23d80f8e5b4459937d75f869c179dd9b948a70b9ba37386532790bac12f2f342fc4f2afd8a45f109331d5daf3344ade893029e322e8b7f3bdb5a49987116b31b2bd6d5bab789ca061ea42f7647c88488f734150e161e5aea78639c5bf9c2fb88da321cbfd379b38cbe6e14af979f238685e2c0ff51629cd228602dbaceff8a214cdc66528cdea114691ef619a8c9a0f9cdb7e08c5bcfc2bfd29e39af38f5db4821c648cc3d976cc455a6e6498c92511b407f3349284901562a912c5af25ff792b9c6c5dfb73519336c7d4a87e49debce7a441b7a29706173e4e4e8dacee63a06ab85dd359b508bc8a0f7002832fae10a0a38efaa475846c4205aebe777334788c3e4652086e26dcdddad991b0ce5256e113bac692d442f524d7e292b86eaf0dd8380ccd78b1489dd2ef6beaf2eb9b08b50bb2a5ff3ba8df3b226baf79a0739d8a60cf815cb347399ac4adb2cea533d3f0ce160a563f8d401e5a6100578e4c8178a7e70663e135edc645cdec2f0588fc99a0cb60dd8788e02554ade370960ce562c210e826a1eba767a09b10f46ebbe6c9166e24286331d2ff025c57a10c7b64c506d0a68642171ad965a001700561fcac2e3f548fd58d32bab5f38b36e62f5546129cea35ce856052e3e480fc639640a5301dd700c8e8d0bd6ac790910fcf2b4f159cc1531aa1c9e37b541520450dde638942081201ae8a580f28cf50530190a45f45468753a122b364be7dad79044ec8b9977d583bc0ac3ec7b9fae192397ce8693310f301c18c2cab5208b369e63c5ac18d0266834e218bb71f308c2c2f2df4a6ccadb3788860a2c733a9252b877ea1c1e849a38a328310bafae9614a6e161170c6fcbe9bd8c4177de1fd18f56805c91fb382aad767891556ff8e1b5f3ab8c18b4fa3053c981c12fa2ea017bb7596158ca533d0dd95a95d0b392222609f6ea336711a9dc50393bc41fac0d429540ad70757f2086bf1bea0132a609ea0bdeea0cef93d8b2a0d59189bffec05281e97b4722291005e9ca7e755be9070f405ab0d6c9546a5ebda2e62adcc621c2b1f6b07cd1e617d50469ef2c71647a47ef98ffbc71505e188cef3e5c774c0987664b6989794d7ca186804ccc6296da3adf22feb351792f1a9cff77413703744bf4f21212920d6a8fa1800da7a38fef7160a50f5b895e7b76f3fd830fcb9a25f3b3ccfd082a1712237e4ca665085aa1c5aa413bce813f1b7ca66105de94babb7b4a05029cc3759d00191fd9bfa0f996cc703403dd6ed2b33f2743a788041f279b767efc373314edfae1bd33f7eaaa7418a59fff7e40d02e618172f6e0abe08c855348f3cba40c8592a0521ed1e41524f20abccb2bf0ebb933e59b7036eff5a66279d578e6b2fd6c4140b33adc67f7083110d815ac55b4833ec0504488265b3ff2bdacec17c91bea9d6bdd931bf056d6e9790e472d874a5a3946b200493c9874d057aa6be3a1ca4da6fbb88a9d853aaa7c8ccabc83582caa65078bbe7b04625d139ed9860080d185bd9798d613ca3014713eb9e36bdeb73f14ac3fc7b2f8f594404f56dd937c0a7e865fa98e858cb0af661cbe12f15c928c4c45a982e24cd322320a96ccd54656b2c7876a5d717e42d3df13189b95ddc2b5a928dbda9ee02c30352045d02cbd854af821300f198b1ce1ea8e45c969020e5c7670fbd9b7227cfd3c809fac1df2eb18c199b27e969f32052376b450003b7ff6332ee1d9fce1b5947b72575ec6541b992fbc76f0e03fc1bb9a0df5ee3de0f34125c311d2ddb67962cf9a8230efff82c25c896621082a587139e997e0532962e84ad697a1a2b80d997c2a268ecca8b7d1095530b332ef368270bf31a75b777a7cfe8c8d324a8c558d3c65f801deac6822842f85f10a641b71ad7e5fb05f64eb3033507dc3a2e9ec02d667ef36c551f69c438e8b6c3927733d83e94f035ef3da230b759df5f5d1964815b176478c4ed94402dc8265e589171df165094a2e4e75614fc6febb8484f28ec8c1252b2d933852573926837e1edf9da0da3f91697b290c3ee5a44fcab3b10095b78b5df3701431cab31750e211d442a77dbc5e2d4d0e67bf329f9103414abd4f3879511375c8800f52f8a17ae6887214bf8634bd99075ab073540f04ff675d32190a3d1152ceee32e30719cd883a82185f89f071c02df443cf7046dce8a6ddc472ed63945faef588acf57985c7ecffa438f5427fb851ebc6a4c577a33895a8fc4628286a48d3bbcda1b769aa3194869e148ba457932fa6f2e4640e2755940e2f5a6a67796b5f88ac10f389b409c0c57bd4bf0cbe0fac2fd2f58ec498d19c43952e4522b51931712eb4002b7b208c02c4e06df99fa8e93e4b9e8b0d7a57e63aacdafb19db0fd422f8e89d1275b49963bd82b490f9e4d24cfe9700e98c73b31fdcf7b7d30d73e9bf6bd86439dc8b63171d53ca7caa860c60777436099db544164d4e4a81a483ffd5ef2980110f461529c057c40f2ee63b71a8eb2d87919726bda25a8fa2f242d3ff7bf0726d8a11d141eb87d2733f1faf456f2eccbe4c3a856702a80ba7e36cd8ef8e064e16e61eedda4478d2edaf0445e2247a76e25b4b5c68720b87bba69b4171983d95a5a764f42fa6f23466096d9a097edf84952023a4541110456b93ea558c2059156c287fc6cde7c74abd90ec539a5f43c2a641b1a34cffa2538ba565d0b57513b8c1b3df541d02d6d5a0aa2f96200dbbf64ab7c0adb868cce23ca607db6d6dd18f956185c983a90c8b4a7ec630178376ac400c61c77fcbacb979e2e07115db8a034a00ffb136f91c0b16c6d796f524f9ce6a0b72c378c8939b56bb83ca0f3d09da2b82b4d3457b568878d019f54f9cddd514a601d4edfae582f1a2674892bacf6eaba66124c797e1ebf91e1b5f12e520404d213b12770966d5c5f3435169f8867faed0107d2cd4cf0638e4f1c488122da7516820cc3d12cdc9f663778455352d2be1d8d3cd611808304554bde601e4ec4c9aa50ec22648b12f45c8d84bdcfc85f95ba0afe254df5d8b40d53adf1d4fe1dc3744bd486e3eb14775f4f4c333f751975a4a8b5bfa497850633aff3ff98deb53d1b515a08c4c474bcce46149dfd5bece51d1dfb6eaf593f8ee037404a5ce5edc2887006059cd3743448ab977899f10540b5a5eac1b9d4346654e4eb0200858b5b92525399a87859859269d3b0fa4c2159dc807548368ff701076606378b44cee2839f05ad94f659270af868cd674b44729bbb8eb2f697101bf4fb4f96d07dabaeb5b6a1cc884423fcac3d3805bffb3c8de3e801d641436ca6b1f50aabce4c7b3b1a24eb6977d5a8c84d6cce8ec9ee93d3062a4bd78ff916fbba7ab228838bd61f25759c6ac8650adbe2b346e65681dbafbb934358ca2b1b854bf42f42404a15caf99b785f132b9a20413b2d9d353220656ae271883ca9733430db09b5e8578e9d4fff032b0ee792f429791089d93876a30100a35c420a0686c125005242551df27673e0826a1c38bc028c104e0f958ae1ffb2d5221fd1a36e598065eed6a449567b41c027b6faa461d3aeee8dfb6285661af7fdcfa484fee654b633342eb122fe72d5d68ea4cfc988cabb0df39b8cbd064d489fcbc90bf313f3a29797d479a8fc12cf5b9ead0907a2dca568bc0f40d0fa4a9c3758f9bfd1ac3662a9f04260ef0d2b86a02d23759b210f38830c4a224649186b6e4b87c6b457217c86f502521940caf1e5b2eadb72951a790c94dd74b929232947b01cefd5a1483e127b1b6d216317b581455f9cf96876af837e5f88cc38a46eb2fb6cd7fcc6fce1a264167b86723829ffffc413bb0000000000000032dd6219a95418314b1e071dd59d0e96083e02cb8778069ed54137ce98bd702dead8fc74992d7743d1450faf7de44c2d59ff2dd339b80d3449e9bda5b3a564f01aeefe300165bf3b00d811c7ae866cb1a0a1b87400c2941841cd2d6953308f1a963f1c6d4486e7e45daabf0b066ad8884f4577534d3c9f3d3f3bbe8a1a3088d9b95da1fc901573e26f5b86c7a868429b9b634c9e35dfd0534563160912a43c64bacc8ea1ced7bc1b77a28716700e501905c9e81e190241e0edbf4f894aee4047c5b5fb58a3db4afaf76790690fdc1289236fbfc5f6cff540eb82de8044d17658fb054b198cc288cc43aa5d805a51cadac3e75c8fd82ad015a04932cb6f6b53aa4e8d9d84018ff8db0f756d6b5db4e06a689b52fe8471b9230c2dd14d042c1fea45c3d2452351a4222421366610d80785f7e47474d4ad58116313813d4db3176d93c4e29e5c7562806879ddc75b9cfcf38d6aed015c0f4d52302a51215187bfe254d6065bd142cc9b9e03f32ebc9686ad0d0cb3fcf0afa320a15f37cf591600636a4ef84c756c0d42ab98bc2479f0d5d230359f622447101844430a7555a4cbc702b55a4a6ed964cf399a1a493e40555f622da1643073a786a3425d95090b9b0e20521187e9e20d35f4e061e6201e67e844d88457f751e5519dd30df9251f1ce2836e0bf61eef8fc6ed22e4887186316566278bec46af3823ed53e3e18ca5741124dc53cadb5ff0846cc1c6b9c072be6dea187e8336eb6b6b7029ef79ff3b2999938cc59aafa1618fc4556ce3c81f99414d5d79538a83ee9d8a9ad0b9e57060d4be9c53266f418455d760f423a1642e9edfccede29d21891d7421ad0f1cefe472d0ef84965575419871374727bf5f1dc72057a18ed4d7e0a2ddd6d105eb2cc3718609814c2968f27465b00fb4b4a64359629722320583a05644693e6fcadde0efc12e66a0c8e48311f0550ab8fbc1556b69bb2a5a0c03f1a59d67046d7acd5beb9f7f9ae6eb18580431624d63ffe294ea5497a65ec3891f4c70b26b7b17a9f82145e5d5156d6b3355ad249bb66168bbb745d00c40d6ef42d52a032cf62caeeaec31f4c85ac403cbb0c6756953f0ddbf79da0cfa6ccc1c40de43bc4a10a700b98322e671225e80e663d30192ff5611c44c095351bb69a4e14c11a3d5b0b53e78954699760516134f3148e71a2b0bb04b24bb1a2c2b503f56249e0a2c638ff40e7c2c7d50ef7196fc9893e18c0ac3fc5a4c0d23ee08080f984dc643854b54df4a638af29dc5df79f905c4133ce263f3b2bb55fa7d56fa82795687e6ee5c68cc13d71e44367ea8670409cf2231990cc6d06e5aae2fc3af1537b33b42775b40bba3aa417016fb9dd89f90a89196c104017a68f7527b8b958e38f9646832a7790045fe394ce41bcbd1cbcbe52cd7e56cec7b2856e448fa5d7e837798b899f05a2c2fbe6d9f1a7b193bbf7c70444d6a37810d4d19d359f9cd6b8a6ef2230b735f8bebe0ccec94e44ed95234bfa4a36a2f0ee9fd5ca73d697344d28436e0fab81e73f447bb144a70aaf96acf6ff52c4737e7a4debcd285bdb54e363d842bc9a7d180c16f010fe4078b41c4c3e565c3edd64e61f995ab0086dbdc026dc1825b8c45ed96edd8d2bd9daa699e5da333274d6bee2097c004462848cd16849f95cd2252c4c87058a821ed977ed751b77b0a8fc0966bf3a30c26d49f3185782a7d314e89f039a15ede458538f1ada8eb836a36bb5d82c402e3feebd37e7b7c667a1c82edc8720072789fa5f388039daa731ce74dbd5aa8965b7ee99f6c271035239ca1c34cdc3c57bd8510dee08f74cda37095b1b098997998fa267e0be15de474b2c737936cacccb4ba44112570bbd13f870b55f3763f77724b586d6e26c3e72b20bb13272f2ee331bcabd4a79980a8d2965c20da2a3918c855215fecce95d29bec58f522d3d6d2852c4ac080fffcb3ee7fb98591f99b7cfb7bb124cc20078030756aee8fd284df06cd5f07c13fd56e5381b19e0a3a9f412a8d27428cb6af0078e4dc8ce4836630360a5c3b98ff5e6cbac1d9d29de9838a84d4722ceea3765be3df9984cf139770f3fb986b9cc9185ab787f54be33d46c54de74d94d13f74ec70cfbe1605c00db79fa8de64cd834090a35c80759f83c8fbefcf9a276dde8a8498d084b4619578eccdda2651a475f73367bda96894bb36eb868035251694cbb745feb150555ada09909497ff1d9c8aee7a35b7c8b2fc64ff483f4fd3491ed52304e6010b9bf2af8c5b8e162a383a0bf0bf108ca78f5086132b2b1a29581f323841c2f189509898d932436e5c1e693ed91f0524da026fecaa2b7efab54aeef120be61de457171c58811e0ca8a7600e0ac249aa579d78d2e2b1d6f41a3da4676b6690ca0249251f5b48b9a3820ac5b25a52cc01bc331c24039b6f4bfab72d5838a35629259930dea936f8c60b4f1b189db1fd1b5e7e6c8a842707ad6756d098a9ab543cde3e1d1161983ea91b7322ee2a713be3bad369d8112fdc7f1ac7b5122d55dc5ae443e10db711ddd6619ffbf96068e28911b1f54388413a17958d61ca07465b54699a1351915300cb826d3bf7f4f217bba0ed3195cbd077b67167b9a03040afc237f3bb36edd9fed33d7d6e7c9493fec34be6543880b0b442d8351496f2e8d60d4d984cca743983c0afab9cdedd5a9d774a121e91230d359c27a3d7b4db38ce73db747af3ca06470901f2605c031a7c9b7d1bbb1e838d36a4d39b039e80bcddfaecca906705fe8c844e93d5aee494dc62c7b4fcb6abe09acf925ef422dc09185b53e960795c56500b43faa6e89720aeee724532f89e60e20b12cd4f832b95189bf45b96aa7af10cf8298b44278de1c67e2d71d811240a7aa2d1d6de22e5b8cef4a1f309de3b81c5a028aabdabddc9637974c2dc19b60458f0954bc751b7ae628ac602eb7c52c7fac0c1621ee7757fc5b002ad7e8fb66fc7da0896547abf01ee091c0cfe1d0fc66e6e03599bb2aa7608a72c30203af5eac3915a0b6616b6119c4a09654de2f56e53296d1f8487cd7ec36c86894bab72ec3ce61208f848432d45a27cafcfbf2a2c56b58e017c76ac7e943aff0b4acaf84dfb343d93efb29c518a9d552c36a3e44c6ea948673bc2aa71c5a873d1d301a9c8b02f19c086f922f0b3e4f7d14e8a59c017809188e2e1b4dc6b55fb8ad82b1c04460b5ff2e9b8f47d3e833599519b79ac6d9ab282db4a55654f60396d2e72bf8e2ebbc8c742913359edadfcbda00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x5, {0x3, 0x0, 0x1000003, 0x105, 0x3fe, 0x80, {0x6, 0x3, 0x40000, 0xfe2b25d, 0x0, 0x0, 0x3, 0x4, 0x0, 0x4000, 0x7, 0x0, 0x0, 0x8, 0xdffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) r4 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r4, 0x4c00, 0x3) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0xb9, 0xe5, 0x35, 0x8, 0x22b8, 0x2d99, 0xee71, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xa0, 0xf0, 0x4, [{{0x9, 0x4, 0x89, 0x6, 0x0, 0xff, 0xff, 0xff, 0x3}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 1.025468271s ago: executing program 5 (id=1987): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noxattr,access=', @ANYBLOB="03"]) r2 = socket(0x10, 0x803, 0x0) connect$unix(r2, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) mkdir(&(0x7f0000003080)='./file0\x00', 0x108) keyctl$set_reqkey_keyring(0xe, 0x1) request_key(&(0x7f00000022c0)='user\x00', &(0x7f0000002300)={'syz', 0x1}, &(0x7f0000002340)='\\\x00', 0x0) mount$bpf(0x0, &(0x7f00000030c0)='./file0\x00', &(0x7f0000003100), 0x800, &(0x7f0000000280)=ANY=[@ANYBLOB="28c30d39c23727261762e8146321afd07aedfac2b02ba2106ac21de750df2f6b5017fd47ac6d4cd7f5c37ecd948276ae498ae2488b8e1ba38ff0a84df15d61cf0ecb4fc443006f041f620aeb6b1136bdf2dd14e8b1f7f74caa295c0eccd443930db6c8ab789af5f0271362a7b2fd5ceacaa7442ed42be02ac01a923e20bb032c98887837770cc8a2953d9f9032c7e2e5e14bf68a45cfd5bbec8308e45a67286c4a8572cd78605eced1f5b115359a7c83222adffb1ad6baf8f6aab056ac6c3ed34e7c5b5c10c3d381e6fd1f38ef1b158588522aff636e908013e92d16a535303c2bc18bbe26909ad6434e", @ANYRESHEX=0x0, @ANYBLOB=',mode=00000000000000000140707,dont_measure,\x00']) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000100)={0x0, 0x1, 0x800}) 967.187752ms ago: executing program 5 (id=1991): r0 = socket(0x1, 0x6, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, &(0x7f0000000bc0)=0x54) setsockopt(r0, 0x107, 0x1, &(0x7f0000000040)="060000000300060000071a800100613f", 0x10) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x107, 0x1, &(0x7f0000000040)="060000000300060000071a801100613f", 0x10) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880)=0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(r3, 0xffffffffffffffff, 0x2) close_range(r0, r0, 0x0) setresuid(0xee01, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000100)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x6, 0x41, &(0x7f0000000240)="269b", 0x2, 0x2, 0x2056, 0x0, 0xffffffff, 0x9, 0x0}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000008) waitid(0x0, r5, 0x0, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000300)={[{@gid={'gid', 0x3d, r7}}]}) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f00000000c0)={0x2, 0x3ff, 0x1, 0x6}) prlimit64(r5, 0x5, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r8, &(0x7f0000006b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x20c6) exit(0x8870) syz_open_procfs(r9, &(0x7f0000000080)='net/xfrm_stat\x00') getrlimit(0x6, &(0x7f0000000000)) 185.267967ms ago: executing program 4 (id=2024): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2a, &(0x7f0000000180)=0x77, 0x4) setrlimit(0x2, &(0x7f0000000000)={0x44, 0x2400004}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc000, 0x1) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x17, 0x0, 0x7) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000001080)={{0x2, 0x4e21, @broadcast}, {0x1}, 0xa, {0x2, 0x4e20, @broadcast}, 'batadv0\x00'}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0xeeee0000, 0x11000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0xdddd1000, 0x100000}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010864, &(0x7f0000000040)=ANY=[]) 171.936937ms ago: executing program 4 (id=2026): ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)}, 0x2400c045) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000100)=ANY=[@ANYBLOB="68020000270013"], 0x268}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) r5 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r5, 0x0, 0x33, 0x0, &(0x7f0000d23000)) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0xc) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) 146.745297ms ago: executing program 4 (id=2027): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee0000, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0x3, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0xa, 0x7, 0x4, 0x1, 0xc, 0x0, 0x2, 0x5}, {0x7f778000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x6, 0x5, 0x4, 0x9, 0x4b}, {0x2, 0xd000, 0x0, 0x48, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x9d, 0x3, 0x6, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0x2, 0x9, 0x54, 0xc, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x8400, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="12010003000000106d04870a40000102030109022d0001010300080904000301030100080921ff078101221a0909058103100096ff060905020300044ed49334619ff02b775cdab54b9aaa0f05d42d0f77a3a88517738e874da473e19eb767acc33f0ecd164d"], 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800081a0}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3fb, 0x100, 0x70bd27, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee0000, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0x3, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0xa, 0x7, 0x4, 0x1, 0xc, 0x0, 0x2, 0x5}, {0x7f778000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x6, 0x5, 0x4, 0x9, 0x4b}, {0x2, 0xd000, 0x0, 0x48, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x9d, 0x3, 0x6, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0x2, 0x9, 0x54, 0xc, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x8400, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) (async) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="12010003000000106d04870a40000102030109022d0001010300080904000301030100080921ff078101221a0909058103100096ff060905020300044ed49334619ff02b775cdab54b9aaa0f05d42d0f77a3a88517738e874da473e19eb767acc33f0ecd164d"], 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800081a0}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3fb, 0x100, 0x70bd27, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) (async) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 115.532098ms ago: executing program 4 (id=2028): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000014000103f70000000100000005"], 0x14}}, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000003) mlock2(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) getpriority(0x1, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000900)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) write$rfkill(r1, &(0x7f0000000c80)={0x0, 0x11, 0x13}, 0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000780)={0x0, {{0xa, 0x4e20, 0x7, @mcast2, 0x4}}, 0x1}, 0x90) 111.342128ms ago: executing program 5 (id=2030): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000780)={0x6, 0x0, [{0xeeee0000, 0x1000, &(0x7f0000001600)=""/4096}, {0x5000, 0x61, &(0x7f0000000300)=""/97}, {0xeeee8000, 0x4, &(0x7f00000001c0)=""/4}, {0x10000, 0xc461de124a7460e9, &(0x7f0000000580)=""/113}, {0xf000, 0x11, &(0x7f00000004c0)=""/17}, {0x2, 0xbd, &(0x7f0000000640)=""/189}]}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000a00)={0x1, 0x0, [{0xeeef0000, 0xe2, &(0x7f00000003c0)=""/226}]}) r2 = socket(0x6, 0x1, 0x2000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000080)={0xd, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}}, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e000000200"/88], 0x290) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x10, 0x114, 0x4}], 0x10}, 0xc4) ioctl$TCFLSH(r4, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 111.048148ms ago: executing program 4 (id=2031): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netfilter\x00') getdents64(r2, &(0x7f0000000080)=""/24, 0x18) getdents64(r2, 0xfffffffffffffffe, 0x64) chmod(&(0x7f0000000100)='./file0\x00', 0x3dc) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) unlink(&(0x7f0000000000)='./file0\x00') r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x17d739293968d0b1, 0x0, 0x20, 0x8, 0x0, 0x7, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0xf000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff, 0x4}, {0xeeee0000, 0x1000, 0xc, 0x8, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x1, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0xa}, {0xdddd6002, 0x80a0000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x3c}, {0x100000, 0xeeee0000, 0x0, 0x78, 0x5, 0x0, 0x2, 0x0, 0x0, 0xff, 0x40}, {0x0, 0xeeee0000, 0x2, 0x0, 0x0, 0x0, 0xa1, 0x20}, {0x0, 0x6000, 0x10, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0xa4, 0x2}, {0x80a0000, 0xdf}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x8000000, 0xf801, 0x0, [0x80000001, 0x0, 0x5]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x2c, r5, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0xc000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 58.792429ms ago: executing program 4 (id=2033): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x31, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x105, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0x35, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) close_range(r2, r2, 0x2) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f00000007c0)=ANY=[@ANYBLOB="50025200000052092ea8a086663fcd64cee2a102aafc05a0d36b0032f453fd7766f9977da8ea1d3d4fcca344f4b3122a8b5f924aa9f9d152ad969165f64b4b127d447a1bf6d019560be47e2dcae9df6fabcdef17417d0babfc005d134b22931b550f620c0be720e97d830e64c8319769d953035cb8afb9e5af66d81388124f9e"], &(0x7f0000000100)={0x0, 0x3, 0x8a, @string={0x8a, 0x3, "772f2a911c0a67243912dc2a4159e7a4b8dc2ff53c6bf6f1b5bd9d0f1fdc9cb3ceed21ed8544f65b902b190ae7dbddc22a8f1b1c9ff3761c4e1a90c2d2f5f8b0b6aaa4632bafd852754cfe3a762d39e868b73c3c2dfd5f05011c3151142a8f4b553ffd5c6e11611433b4799248d3fc50d4c653b6a70f22d986fd39b1d2129f1f4771c77d64035bb5"}}, &(0x7f00000001c0)={0x0, 0xf, 0x17, {0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x4, 0x3ff}, @wireless={0xb, 0x10, 0x1, 0x4, 0x90, 0xe, 0x7c, 0x7, 0x9}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x0, 0x3, 0x7f, "97e67125", "33b1f278"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x68, 0x0, 0x5, 0xff, 0x6, 0x1ff, 0x400}}}, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x31bea0123a4f3048, 0x5, 0x34, "c2f9286ab5abea2e3cff1f4f9828b3723ec1f3a28b8a0abb4d914dc06a2c0487fb87e5c6ad5b8653138007e4461e84d8c1a82b1f"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xf7}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x200, 0x80}}, &(0x7f0000000440)={0x40, 0x7, 0x2}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x8a}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "8bc4"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0xe}, &(0x7f0000000540)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f00000005c0)={0x40, 0x19, 0x2, 'v|'}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0xe}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x80}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x3}}) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) 58.559419ms ago: executing program 0 (id=2034): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x3f000000, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300), 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 57.670909ms ago: executing program 0 (id=2035): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000180)=0x9, 0x4) 57.234319ms ago: executing program 0 (id=2036): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000240)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) write$binfmt_format(r2, &(0x7f0000000100)='-1\x00', 0x2) (async) r3 = fspick(r0, &(0x7f0000000000)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000140)='}$@-*#\x00', 0x0, r2) close(r2) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async, rerun: 32) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (rerun: 32) read$eventfd(r4, &(0x7f0000000040), 0x8) (async, rerun: 32) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000001440)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080adc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}}, 0x50) write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0x0, r6, {0x7, 0x2b, 0x7, 0x402004, 0x81, 0x5, 0xfffffff3, 0x101, 0x0, 0x0, 0x40, 0x401}}, 0x50) (async) r7 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000640)={0x18, 0x0, &(0x7f00000002c0)=[@decrefs={0x400c6314, 0x4}, @clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) 419.861µs ago: executing program 0 (id=2037): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000180)=0x9, 0x4) (fail_nth: 1) 166.761µs ago: executing program 0 (id=2038): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x3cd842, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x24000, 0x41) mkdirat(r5, &(0x7f0000000140)='./file0\x00', 0x9) pidfd_getfd(r4, r2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, 0x0, 0x8) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, 0x0, 0x0) setsockopt$inet6_int(r6, 0x29, 0xb, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021300011800b00010074617267657400002000028005000300c400000008000240000000000900010053"], 0xb4}}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000180)=0x9, 0x4) 0s ago: executing program 0 (id=2039): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002efffffab14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000100)={0x0, 0x1, 0x800}) kernel console output (not intermixed with test programs): 2.297385][ T290] veth0_vlan: entered promiscuous mode [ 22.306351][ T292] veth0_vlan: entered promiscuous mode [ 22.313355][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.320412][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.337945][ T290] veth1_macvtap: entered promiscuous mode [ 22.364157][ T292] veth1_macvtap: entered promiscuous mode [ 22.393091][ T289] veth0_vlan: entered promiscuous mode [ 22.399927][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.432817][ T291] veth0_vlan: entered promiscuous mode [ 22.448373][ T289] veth1_macvtap: entered promiscuous mode [ 22.477444][ T291] veth1_macvtap: entered promiscuous mode [ 22.543337][ T338] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.834286][ T296] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.006567][ T296] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 23.029990][ T373] syzkaller0: entered promiscuous mode [ 23.035768][ T296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 23.047075][ T373] syzkaller0: entered allmulticast mode [ 23.052731][ T296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 23.075444][ T296] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 23.098372][ T296] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 23.125338][ T296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.138038][ T296] usb 4-1: config 0 descriptor?? [ 23.451206][ T391] tipc: Started in network mode [ 23.456173][ T391] tipc: Node identity a212ecae1ca8, cluster identity 4711 [ 23.463419][ T391] tipc: Enabled bearer , priority 0 [ 23.483991][ T391] syzkaller0: entered promiscuous mode [ 23.489556][ T391] syzkaller0: entered allmulticast mode [ 23.495642][ T391] tipc: Resetting bearer [ 23.512744][ T390] tipc: Resetting bearer [ 23.529030][ T390] tipc: Disabling bearer [ 23.549153][ T296] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max [ 23.560050][ T296] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 23.569424][ T296] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 23.601317][ T396] Invalid ELF header magic: != ELF [ 23.774304][ T65] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.914372][ T296] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.934257][ T65] usb 1-1: Using ep0 maxpacket: 32 [ 23.940576][ T65] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 23.948831][ T65] usb 1-1: config 0 has no interface number 0 [ 23.956525][ T65] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 23.965640][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.973729][ T65] usb 1-1: Product: syz [ 23.977942][ T65] usb 1-1: Manufacturer: syz [ 23.982561][ T65] usb 1-1: SerialNumber: syz [ 23.988159][ T65] usb 1-1: config 0 descriptor?? [ 23.993972][ T65] smsc95xx v2.0.0 [ 24.064255][ T296] usb 3-1: Using ep0 maxpacket: 32 [ 24.070597][ T296] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 24.080848][ T296] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.090720][ T296] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 24.103768][ T296] usb 3-1: config 0 interface 0 has no altsetting 0 [ 24.110422][ T296] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 24.119611][ T296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.128615][ T296] usb 3-1: config 0 descriptor?? [ 24.397354][ T65] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 24.408385][ T65] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 24.539023][ T296] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 24.547257][ T296] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 24.555188][ T296] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 24.563273][ T296] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 24.571276][ T296] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 24.580809][ T296] hid-thrustmaster 0003:044F:B65D.0002: hidraw1: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 24.608516][ T296] hid-thrustmaster 0003:044F:B65D.0002: Wrong number of endpoints? [ 24.748090][ C0] hid-thrustmaster 0003:044F:B65D.0002: Unknown packet type 0x0, unable to proceed further with wheel init [ 24.981076][ T10] usb 3-1: USB disconnect, device number 2 [ 25.391873][ T36] kauditd_printk_skb: 79 callbacks suppressed [ 25.391910][ T36] audit: type=1400 audit(1759369455.940:153): avc: denied { ioctl } for pid=415 comm="syz.3.32" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 25.426908][ T416] rust_binder: 416 RLIMIT_NICE not set [ 25.434567][ T45] rust_binder: 415: removing orphan mapping 0:1144 [ 25.447238][ T36] audit: type=1400 audit(1759369455.970:154): avc: denied { set_context_mgr } for pid=415 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 25.472804][ T36] audit: type=1400 audit(1759369455.980:155): avc: denied { map } for pid=415 comm="syz.3.32" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 25.504272][ T36] audit: type=1400 audit(1759369455.980:156): avc: denied { read write } for pid=415 comm="syz.3.32" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 25.513118][ T418] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.542655][ T36] audit: type=1400 audit(1759369455.980:157): avc: denied { open } for pid=415 comm="syz.3.32" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 25.566403][ T36] audit: type=1400 audit(1759369455.980:158): avc: denied { call } for pid=415 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 25.585722][ T420] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=420 comm=syz.2.34 [ 25.585750][ T36] audit: type=1400 audit(1759369455.980:159): avc: denied { transfer } for pid=415 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 25.616816][ T36] audit: type=1400 audit(1759369456.130:160): avc: denied { ioctl } for pid=417 comm="syz.3.33" path="socket:[3793]" dev="sockfs" ino=3793 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.641097][ T36] audit: type=1400 audit(1759369456.150:161): avc: denied { bind } for pid=417 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 25.660369][ T65] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 25.668302][ T36] audit: type=1400 audit(1759369456.150:162): avc: denied { read } for pid=417 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 25.690359][ T65] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 25.694399][ T296] usb 4-1: USB disconnect, device number 2 [ 25.710215][ T65] usb 1-1: USB disconnect, device number 2 [ 25.979387][ T453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.47'. [ 26.174286][ T296] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 26.224246][ T389] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.264750][ T65] rust_binder: 469: removing orphan mapping 0:4120 [ 26.325949][ T296] usb 4-1: unable to get BOS descriptor or descriptor too short [ 26.339254][ T296] usb 4-1: not running at top speed; connect to a high speed hub [ 26.347877][ T296] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.358152][ T296] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 26.369481][ T296] usb 4-1: string descriptor 0 read error: -22 [ 26.375984][ T296] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 26.385119][ T389] usb 2-1: Using ep0 maxpacket: 8 [ 26.390564][ T296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.399786][ T389] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 26.409594][ T389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.418776][ T296] usb 4-1: 0:2 : does not exist [ 26.427813][ T389] usb 2-1: config 0 descriptor?? [ 26.574261][ T65] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 26.725425][ T65] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 26.736597][ T65] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.749467][ T65] usb 3-1: config 0 interface 0 has no altsetting 0 [ 26.756139][ T65] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 26.765315][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.774094][ T65] usb 3-1: config 0 descriptor?? [ 26.804285][ T462] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.954262][ T462] usb 1-1: Using ep0 maxpacket: 8 [ 26.960450][ T462] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.971370][ T462] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.981152][ T462] usb 1-1: config 0 interface 0 has no altsetting 0 [ 26.987802][ T462] usb 1-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 26.996877][ T462] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.005746][ T462] usb 1-1: config 0 descriptor?? [ 27.184118][ T65] acrux 0003:1A34:0802.0003: invalid report_count -1057747719 [ 27.191736][ T65] acrux 0003:1A34:0802.0003: item 0 4 1 9 parsing failed [ 27.199027][ T65] acrux 0003:1A34:0802.0003: parse failed [ 27.204846][ T65] acrux 0003:1A34:0802.0003: probe with driver acrux failed with error -22 [ 27.227648][ T296] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 27.236959][ T296] usb 4-1: Warning! Unlikely big volume range (=16147), cval->res is probably wrong. [ 27.246542][ T296] usb 4-1: [5] FU [Mic Capture Volume] ch = 1, val = -28953/-12806/1 [ 27.256841][ T296] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 27.266397][ T296] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 27.278377][ T296] usb 4-1: USB disconnect, device number 3 [ 27.390097][ T9] usb 3-1: USB disconnect, device number 3 [ 27.417882][ T462] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0 [ 27.425423][ T462] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0 [ 27.432333][ T462] ntrig 0003:1B96:0004.0004: item fetching failed at offset 2/5 [ 27.440833][ T462] ntrig 0003:1B96:0004.0004: parse failed [ 27.446841][ T462] ntrig 0003:1B96:0004.0004: probe with driver ntrig failed with error -22 [ 27.623226][ T9] usb 1-1: USB disconnect, device number 3 [ 28.084256][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 28.244267][ T389] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 28.254366][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 28.255060][ T507] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 28.259524][ T507] rust_binder: Error while translating object. [ 28.263581][ T389] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 28.269052][ T507] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.274822][ T389] asix 2-1:0.0: probe with driver asix failed with error -71 [ 28.285130][ T507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64 [ 28.296401][ T389] usb 2-1: USB disconnect, device number 2 [ 28.317344][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 28.325724][ T9] usb 4-1: config 0 has no interface number 0 [ 28.332460][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 28.341255][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 28.350505][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.358657][ T9] usb 4-1: Product: syz [ 28.362889][ T9] usb 4-1: Manufacturer: syz [ 28.367730][ T9] usb 4-1: SerialNumber: syz [ 28.374941][ T9] usb 4-1: config 0 descriptor?? [ 28.381841][ T9] smsc75xx v1.0.0 [ 28.664303][ T406] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 28.815330][ T406] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 28.824563][ T406] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.833183][ T406] usb 3-1: config 0 descriptor?? [ 28.983736][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 28.995199][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 29.004955][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 29.015303][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 30.487621][ T560] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 30.496400][ T560] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 30.646254][ T406] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 30.658267][ T406] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 30.669948][ T406] asix 3-1:0.0: probe with driver asix failed with error -71 [ 30.681677][ T406] usb 3-1: USB disconnect, device number 4 [ 30.837215][ T31] usb 4-1: USB disconnect, device number 4 [ 31.108926][ T573] kvm: pic: non byte write [ 31.262425][ T595] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 31.357134][ T603] af_packet: tpacket_rcv: packet too big, clamped from 4710 to 4294967272. macoff=96 [ 31.392865][ T608] netlink: 679 bytes leftover after parsing attributes in process `syz.2.107'. [ 31.405191][ T608] netlink: 679 bytes leftover after parsing attributes in process `syz.2.107'. [ 31.423084][ T610] fuse: Unknown parameter '0xffffffffffffffff' [ 31.524106][ T617] futex_wake_op: syz.2.111 tries to shift op by -1; fix this program [ 31.553409][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 31.553427][ T36] audit: type=1400 audit(1759369462.100:196): avc: denied { read } for pid=619 comm="syz.2.112" dev="nsfs" ino=4026532469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.584859][ T36] audit: type=1400 audit(1759369462.100:197): avc: denied { open } for pid=619 comm="syz.2.112" path="net:[4026532469]" dev="nsfs" ino=4026532469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.609743][ T36] audit: type=1400 audit(1759369462.100:198): avc: denied { create } for pid=619 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.685273][ T623] syzkaller0: entered promiscuous mode [ 31.690799][ T623] syzkaller0: entered allmulticast mode [ 31.704265][ T36] audit: type=1400 audit(1759369462.250:199): avc: denied { relabelfrom } for pid=622 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 31.723988][ T36] audit: type=1400 audit(1759369462.250:200): avc: denied { relabelto } for pid=622 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 32.034290][ T406] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 32.184263][ T406] usb 1-1: Using ep0 maxpacket: 8 [ 32.190628][ T406] usb 1-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 32.199727][ T406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.209557][ T406] usb 1-1: config 0 descriptor?? [ 32.571350][ T36] audit: type=1400 audit(1759369463.120:201): avc: denied { create } for pid=634 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.617151][ T36] audit: type=1400 audit(1759369463.170:202): avc: denied { bind } for pid=638 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 32.636372][ T36] audit: type=1400 audit(1759369463.170:203): avc: denied { name_bind } for pid=638 comm="syz.2.119" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 32.641044][ T406] lenovo 0003:17EF:60B5.0005: item fetching failed at offset 3/5 [ 32.657003][ T36] audit: type=1400 audit(1759369463.170:204): avc: denied { node_bind } for pid=638 comm="syz.2.119" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 32.665109][ T406] lenovo 0003:17EF:60B5.0005: hid_parse failed [ 32.691050][ T406] lenovo 0003:17EF:60B5.0005: probe with driver lenovo failed with error -22 [ 32.850517][ T462] usb 1-1: USB disconnect, device number 4 [ 33.039028][ T36] audit: type=1400 audit(1759369463.590:205): avc: denied { ioctl } for pid=642 comm="syz.3.121" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.040684][ T643] input: syz1 as /devices/virtual/input/input4 [ 33.828292][ T331] bridge_slave_1: left allmulticast mode [ 33.839426][ T331] bridge_slave_1: left promiscuous mode [ 33.845679][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.854557][ T331] bridge_slave_0: left allmulticast mode [ 33.860216][ T331] bridge_slave_0: left promiscuous mode [ 33.867678][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.009515][ T331] veth1_macvtap: left promiscuous mode [ 34.015443][ T331] veth0_vlan: left promiscuous mode [ 34.093655][ T672] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.100934][ T672] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.109052][ T672] bridge_slave_0: entered allmulticast mode [ 34.121841][ T672] bridge_slave_0: entered promiscuous mode [ 34.130870][ T672] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.138433][ T672] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.145724][ T672] bridge_slave_1: entered allmulticast mode [ 34.151962][ T672] bridge_slave_1: entered promiscuous mode [ 34.172255][ T680] syzkaller0: entered promiscuous mode [ 34.177814][ T680] syzkaller0: entered allmulticast mode [ 34.231732][ T672] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.238835][ T672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.246146][ T672] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.253181][ T672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.273373][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.280689][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.297433][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.304521][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.313516][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.320585][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.353179][ T672] veth0_vlan: entered promiscuous mode [ 34.366775][ T672] veth1_macvtap: entered promiscuous mode [ 34.554319][ T702] tipc: Started in network mode [ 34.559268][ T702] tipc: Node identity 6ae2fd235d41, cluster identity 4711 [ 34.566716][ T702] tipc: Enabled bearer , priority 0 [ 34.574755][ T700] tipc: Resetting bearer [ 34.581575][ T700] tipc: Disabling bearer [ 34.634254][ T31] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 34.785560][ T31] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 34.795045][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.803909][ T31] usb 5-1: config 0 descriptor?? [ 35.024544][ T719] syzkaller1: entered promiscuous mode [ 35.030128][ T719] syzkaller1: entered allmulticast mode [ 35.818571][ T31] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 35.829305][ T31] asix 5-1:0.0: probe with driver asix failed with error -71 [ 35.838413][ T31] usb 5-1: USB disconnect, device number 2 [ 35.854582][ T389] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 35.984288][ T462] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 36.004235][ T389] usb 4-1: Using ep0 maxpacket: 16 [ 36.010523][ T389] usb 4-1: config 0 interface 0 has no altsetting 0 [ 36.017224][ T389] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 36.026320][ T389] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.035315][ T389] usb 4-1: config 0 descriptor?? [ 36.137268][ T462] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.147453][ T462] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.157127][ T462] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 36.166373][ T462] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 36.174472][ T462] usb 1-1: SerialNumber: syz [ 36.243929][ T725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.252618][ T725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.362940][ T732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.154'. [ 36.384981][ T462] usb 1-1: 0:2 : does not exist [ 36.392110][ T462] usb 1-1: USB disconnect, device number 5 [ 36.401109][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.463238][ T389] hid (null): invalid report_size 543716457 [ 36.469266][ T389] hid (null): invalid report_size 543716457 [ 36.475496][ T389] hid (null): invalid report_size 14947 [ 36.667381][ T462] usb 4-1: USB disconnect, device number 6 [ 37.240995][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 37.241015][ T36] audit: type=1400 audit(1759369467.790:223): avc: denied { create } for pid=751 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 37.266722][ T36] audit: type=1400 audit(1759369467.790:224): avc: denied { sys_admin } for pid=751 comm="syz.3.161" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 37.453929][ T36] audit: type=1400 audit(1759369468.000:225): avc: denied { ioctl } for pid=754 comm="syz.4.162" path="socket:[6345]" dev="sockfs" ino=6345 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.534624][ T763] netlink: 'syz.4.166': attribute type 11 has an invalid length. [ 37.971017][ T774] Invalid ELF header magic: != ELF [ 37.999584][ T36] audit: type=1400 audit(1759369468.550:226): avc: denied { read write } for pid=775 comm="syz.3.172" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 38.000429][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 38.043986][ T36] audit: type=1400 audit(1759369468.550:227): avc: denied { open } for pid=775 comm="syz.3.172" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 38.044326][ T31] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 38.091409][ T779] fido_id[779]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 38.244016][ T793] process 'syz.3.178' launched './file1' with NULL argv: empty string added [ 38.252845][ T389] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 38.296300][ T36] audit: type=1400 audit(1759369468.850:228): avc: denied { read write } for pid=791 comm="syz.2.179" name="file0" dev="fuse" ino=144115188075855873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 38.343933][ T36] audit: type=1400 audit(1759369468.850:229): avc: denied { open } for pid=791 comm="syz.2.179" path="/48/file0/file0" dev="fuse" ino=144115188075855873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 38.393067][ T36] audit: type=1400 audit(1759369468.940:230): avc: denied { listen } for pid=798 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.422745][ T36] audit: type=1400 audit(1759369468.960:231): avc: denied { accept } for pid=798 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.443049][ T389] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.463117][ T389] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.473398][ T389] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 38.495940][ T389] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.504918][ T389] usb 1-1: config 0 descriptor?? [ 38.694010][ T36] audit: type=1400 audit(1759369469.240:232): avc: denied { read write } for pid=807 comm="syz.3.185" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 38.734249][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 38.895419][ T31] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 38.906621][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.917616][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.924138][ T389] hid-steam 0003:28DE:1142.0008: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 38.927486][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 38.959521][ T31] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 38.968699][ T31] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 38.976830][ T31] usb 3-1: Manufacturer: syz [ 38.982039][ T31] usb 3-1: config 0 descriptor?? [ 39.125655][ T555] usb 1-1: USB disconnect, device number 6 [ 39.390344][ T31] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 39.397661][ T31] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 39.406312][ T31] appleir 0003:05AC:8243.0009: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 40.710199][ T802] raw-gadget.1 gadget.2: fail, usb_ep_queue returned -108 [ 40.845170][ T389] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 40.892734][ T851] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.892945][ T851] rust_binder: 37: no such ref 1 [ 40.904961][ T851] rust_binder: Write failure EINVAL in pid:37 [ 40.984251][ T389] usb 3-1: device descriptor read/64, error -32 [ 41.594536][ T885] kvm_intel: kvm [884]: vcpu5, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x8900480001ff [ 41.753626][ T893] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 41.904551][ T296] usb 3-1: USB disconnect, device number 5 [ 42.361970][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 42.361989][ T36] audit: type=1400 audit(1759369472.910:243): avc: denied { watch } for pid=912 comm="syz.3.224" path="/58" dev="tmpfs" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 42.405382][ T915] 9pnet_fd: Insufficient options for proto=fd [ 42.476220][ T917] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 43.604266][ T296] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 43.755475][ T296] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.765718][ T296] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.776233][ T296] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 43.785361][ T296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.793393][ T296] usb 3-1: Product: syz [ 43.797595][ T296] usb 3-1: Manufacturer: syz [ 43.802200][ T296] usb 3-1: SerialNumber: syz [ 44.012408][ T296] usb 3-1: 0:2 : does not exist [ 44.021493][ T296] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 44.033967][ T296] usb 3-1: USB disconnect, device number 6 [ 44.048179][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.804318][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 44.964239][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 44.970443][ T9] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 44.982220][ T9] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 44.991345][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.999430][ T9] usb 3-1: Product: syz [ 45.003613][ T9] usb 3-1: Manufacturer: syz [ 45.008253][ T9] usb 3-1: SerialNumber: syz [ 45.017117][ T9] usb 3-1: config 0 descriptor?? [ 45.025933][ T9] usb 3-1: bad CDC descriptors [ 45.030930][ T9] usb 3-1: unsupported MDLM descriptors [ 45.234574][ T555] usb 3-1: USB disconnect, device number 7 [ 45.764307][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 45.914240][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 45.926058][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 45.940068][ T9] usb 4-1: config 0 has no interface number 0 [ 45.954261][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 45.965933][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 45.977291][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.990296][ T9] usb 4-1: Product: syz [ 45.994677][ T9] usb 4-1: Manufacturer: syz [ 45.999429][ T9] usb 4-1: SerialNumber: syz [ 46.005414][ T9] usb 4-1: config 0 descriptor?? [ 46.011425][ T9] smsc75xx v1.0.0 [ 46.615047][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 46.634381][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 46.924299][ T555] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 46.934264][ T31] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 47.074280][ T555] usb 3-1: Using ep0 maxpacket: 32 [ 47.080604][ T555] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 47.089062][ T555] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 47.098012][ T555] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 47.107059][ T555] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 47.116839][ T555] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 47.126593][ T555] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 47.139679][ T555] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 47.148816][ T555] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.156917][ T31] usb 5-1: config 1 interface 0 has no altsetting 0 [ 47.164895][ T555] usb 3-1: config 0 descriptor?? [ 47.170706][ T31] usb 5-1: string descriptor 0 read error: -22 [ 47.177594][ T31] usb 5-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.40 [ 47.186737][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.372587][ T555] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 47.384914][ T555] usb 3-1: USB disconnect, device number 8 [ 47.391881][ T555] usblp0: removed [ 47.400070][ T31] usbhid 5-1:1.0: can't add hid device: -71 [ 47.406132][ T31] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 47.414901][ T31] usb 5-1: USB disconnect, device number 3 [ 47.814271][ T296] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 47.850945][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 47.861817][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 47.871545][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 47.881056][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 47.890565][ T9] usb 4-1: USB disconnect, device number 7 [ 47.964285][ T296] usb 3-1: Using ep0 maxpacket: 32 [ 47.971276][ T296] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 47.979840][ T296] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 47.988485][ T296] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 47.997557][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 48.007272][ T296] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 48.017074][ T296] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 48.030098][ T296] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 48.039231][ T296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.051472][ T296] usb 3-1: config 0 descriptor?? [ 48.274407][ T296] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 48.500984][ T36] audit: type=1400 audit(1759369479.050:244): avc: denied { read write } for pid=1045 comm="syz.2.272" name="lp0" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 48.534234][ T36] audit: type=1400 audit(1759369479.080:245): avc: denied { open } for pid=1045 comm="syz.2.272" path="/dev/usb/lp0" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 48.562716][ T296] usb 3-1: USB disconnect, device number 9 [ 48.575514][ T296] usblp0: removed [ 49.294703][ T1076] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 49.303475][ T36] audit: type=1400 audit(1759369479.850:246): avc: denied { mounton } for pid=1073 comm="syz.0.281" path="/66/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.484250][ T45] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 49.644657][ T45] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 49.656315][ T45] usb 3-1: config 0 has no interface number 0 [ 49.662473][ T45] usb 3-1: config 0 interface 41 has no altsetting 0 [ 49.678649][ T45] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 49.688204][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.696999][ T45] usb 3-1: Product: syz [ 49.701293][ T45] usb 3-1: Manufacturer: syz [ 49.706208][ T45] usb 3-1: SerialNumber: syz [ 49.711606][ T45] usb 3-1: config 0 descriptor?? [ 49.809276][ T36] audit: type=1400 audit(1759369480.360:247): avc: denied { append } for pid=1104 comm="syz.4.295" name="001" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 49.853130][ T36] audit: type=1400 audit(1759369480.400:248): avc: denied { getopt } for pid=1106 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.934274][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 50.085334][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.095556][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.105440][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 50.114759][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 50.122902][ T9] usb 1-1: SerialNumber: syz [ 50.331739][ T9] usb 1-1: 0:2 : does not exist [ 50.340972][ T9] usb 1-1: USB disconnect, device number 7 [ 50.356121][ T414] udevd[414]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.392516][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.399713][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.406876][ T1113] bridge_slave_0: entered allmulticast mode [ 50.413210][ T1113] bridge_slave_0: entered promiscuous mode [ 50.419978][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.427155][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.434408][ T1113] bridge_slave_1: entered allmulticast mode [ 50.440876][ T1113] bridge_slave_1: entered promiscuous mode [ 50.523536][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.528568][ T45] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 50.530631][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.553338][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.560474][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.581443][ T36] audit: type=1400 audit(1759369481.130:249): avc: denied { bind } for pid=1124 comm="syz.4.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.593273][ T1113] veth0_vlan: entered promiscuous mode [ 50.616918][ T1113] veth1_macvtap: entered promiscuous mode [ 50.622724][ T36] audit: type=1400 audit(1759369481.150:250): avc: denied { listen } for pid=1124 comm="syz.4.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.658204][ T36] audit: type=1400 audit(1759369481.210:251): avc: denied { mounton } for pid=1113 comm="syz-executor" path="/root/syzkaller.Uw699g/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 50.944248][ T45] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 50.954949][ T45] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 50.965124][ T45] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 50.974751][ T45] usb 3-1: USB disconnect, device number 10 [ 51.018838][ T36] audit: type=1400 audit(1759369481.570:252): avc: denied { read } for pid=1142 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.072140][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.461930][ T36] audit: type=1400 audit(1759369482.010:253): avc: denied { setopt } for pid=1151 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.489642][ T1154] rust_binder: Error while translating object. [ 51.489666][ T1154] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.496639][ T1154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:162 [ 51.517755][ T1156] mmap: syz.2.311 (1156) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.541421][ T1156] tipc: Enabled bearer , priority 10 [ 51.974305][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 52.125401][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.136036][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.145934][ T45] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 52.155189][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 52.163290][ T45] usb 3-1: SerialNumber: syz [ 52.373292][ T45] usb 3-1: 0:2 : does not exist [ 52.380053][ T45] usb 3-1: USB disconnect, device number 11 [ 52.419232][ T1169] syzkaller0: entered promiscuous mode [ 52.424760][ T1169] syzkaller0: entered allmulticast mode [ 52.654281][ T9] tipc: Node number set to 3199921326 [ 52.717885][ T1186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'. [ 53.094229][ T1149] Bluetooth: hci0: command 0x1003 tx timeout [ 53.100391][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.420826][ T1225] netlink: 176 bytes leftover after parsing attributes in process `syz.2.336'. [ 53.559277][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 53.559297][ T36] audit: type=1400 audit(1759369484.110:260): avc: denied { sqpoll } for pid=1229 comm="syz.0.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 53.894245][ T45] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 54.045311][ T45] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.060491][ T45] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.069873][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.078567][ T45] usb 6-1: Product: syz [ 54.083902][ T331] bridge_slave_1: left allmulticast mode [ 54.090079][ T331] bridge_slave_1: left promiscuous mode [ 54.093275][ T45] usb 6-1: Manufacturer: syz [ 54.096003][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.108049][ T331] bridge_slave_0: left allmulticast mode [ 54.109657][ T45] usb 6-1: SerialNumber: syz [ 54.113702][ T331] bridge_slave_0: left promiscuous mode [ 54.113787][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.255287][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 54.270630][ T331] tipc: Left network mode [ 54.278712][ T331] veth1_macvtap: left promiscuous mode [ 54.284348][ T331] veth0_vlan: left promiscuous mode [ 54.425470][ T9] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 54.433652][ T9] usb 5-1: config 0 has no interface number 0 [ 54.439846][ T9] usb 5-1: config 0 interface 41 has no altsetting 0 [ 54.448068][ T9] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 54.457200][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.465293][ T9] usb 5-1: Product: syz [ 54.469512][ T9] usb 5-1: Manufacturer: syz [ 54.474138][ T9] usb 5-1: SerialNumber: syz [ 54.480391][ T9] usb 5-1: config 0 descriptor?? [ 55.135266][ T45] cdc_ncm 6-1:1.0: bind() failure [ 55.141505][ T45] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 55.148635][ T45] cdc_ncm 6-1:1.1: bind() failure [ 55.163704][ T45] usb 6-1: USB disconnect, device number 2 [ 55.239754][ T36] audit: type=1400 audit(1759369485.790:261): avc: denied { read } for pid=1285 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.290027][ T9] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 55.375979][ T1288] overlayfs: workdir and upperdir must reside under the same mount [ 55.429615][ T1295] overlayfs: failed to clone lowerpath [ 55.724223][ T36] audit: type=1400 audit(1759369486.230:262): avc: denied { read } for pid=1304 comm="syz.0.368" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 55.755496][ T36] audit: type=1400 audit(1759369486.230:263): avc: denied { open } for pid=1304 comm="syz.0.368" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 55.837574][ T1313] rust_binder: 1311 RLIMIT_NICE not set [ 56.041938][ T36] audit: type=1400 audit(1759369486.590:264): avc: denied { append } for pid=1318 comm="syz.5.373" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 56.074360][ T1325] rust_binder: 1321 RLIMIT_NICE not set [ 56.074462][ T1321] rust_binder: Read failure Err(EFAULT) in pid:223 [ 56.337872][ T1346] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.555565][ T9] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 56.576216][ T9] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 56.590010][ T9] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 56.603657][ T9] usb 5-1: USB disconnect, device number 4 [ 57.101604][ T36] audit: type=1400 audit(1759369487.650:265): avc: denied { read } for pid=1370 comm="syz.4.390" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.125164][ T36] audit: type=1400 audit(1759369487.660:266): avc: denied { ioctl } for pid=1370 comm="syz.4.390" path="/68/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 58.175810][ T1407] netlink: 'syz.4.403': attribute type 11 has an invalid length. [ 58.546632][ T1422] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 58.593236][ T1425] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 58.750093][ T1432] tipc: Failed to remove unknown binding: 66,1,1/3199921326:755199509/755199511 [ 58.759245][ T1432] tipc: Failed to remove unknown binding: 66,1,1/3199921326:755199509/755199511 [ 58.799948][ T1434] kvm: pic: non byte read [ 58.943490][ T1442] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.043101][ T1449] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 59.049852][ T1447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.420'. [ 59.052301][ T1449] overlayfs: missing 'lowerdir' [ 59.063112][ T1447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.420'. [ 59.253273][ T36] audit: type=1400 audit(1759369489.800:267): avc: denied { setattr } for pid=1462 comm="syz.0.426" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.278242][ T1461] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.333108][ T1468] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.384703][ T1471] rust_binder: 1471 RLIMIT_NICE not set [ 59.391362][ T1471] rust_binder: 1471 RLIMIT_NICE not set [ 59.462837][ T1476] VFS: Mount too revealing [ 59.515686][ T1482] KVM: debugfs: duplicate directory 1482-5 [ 59.541257][ T36] audit: type=1400 audit(1759369490.090:268): avc: denied { append } for pid=1484 comm="syz.2.434" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 59.609407][ T1487] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 59.622149][ T1487] kvm: pic: non byte read [ 59.628262][ T1487] kvm: pic: level sensitive irq not supported [ 59.628348][ T1487] kvm: pic: non byte read [ 59.651042][ T1487] kvm: pic: level sensitive irq not supported [ 59.651120][ T1487] kvm: pic: non byte read [ 59.662211][ T1492] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.674578][ T1487] kvm: pic: level sensitive irq not supported [ 59.674665][ T1487] kvm: pic: non byte read [ 59.701437][ T36] audit: type=1400 audit(1759369490.250:269): avc: denied { write } for pid=1491 comm="syz.4.436" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 59.704677][ T1492] input: syz1 as /devices/virtual/input/input5 [ 59.836180][ T330] bridge_slave_1: left allmulticast mode [ 59.841924][ T330] bridge_slave_1: left promiscuous mode [ 59.852023][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.867439][ T330] bridge_slave_0: left allmulticast mode [ 59.873226][ T330] bridge_slave_0: left promiscuous mode [ 59.879094][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.887349][ T330] tipc: Resetting bearer [ 59.950333][ T330] tipc: Disabling bearer [ 60.036824][ T36] audit: type=1400 audit(1759369490.590:270): avc: denied { ioctl } for pid=1499 comm="syz.5.440" path="socket:[12814]" dev="sockfs" ino=12814 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.078482][ T330] tipc: Left network mode [ 60.092424][ T330] veth1_macvtap: left promiscuous mode [ 60.108596][ T330] veth0_vlan: left promiscuous mode [ 60.171574][ T389] rust_binder: 1467: removing orphan mapping 0:1120 [ 60.186197][ T389] rust_binder: 0: removing orphan mapping 1120:4120 [ 60.311368][ T1507] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.318485][ T1507] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.325875][ T1507] bridge_slave_0: entered allmulticast mode [ 60.332373][ T1507] bridge_slave_0: entered promiscuous mode [ 60.339090][ T1507] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.346393][ T1507] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.353548][ T1507] bridge_slave_1: entered allmulticast mode [ 60.360853][ T1507] bridge_slave_1: entered promiscuous mode [ 60.431406][ T1507] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.438541][ T1507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.445858][ T1507] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.452904][ T1507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.523559][ T1507] veth0_vlan: entered promiscuous mode [ 60.541322][ T1507] veth1_macvtap: entered promiscuous mode [ 60.653831][ T36] audit: type=1326 audit(1759369491.200:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1528 comm="syz.0.448" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faff618eec9 code=0x0 [ 60.764372][ T45] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 60.915711][ T45] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 60.925670][ T45] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 60.938031][ T45] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 60.947588][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.956279][ T45] usb 5-1: Product: syz [ 60.960519][ T45] usb 5-1: Manufacturer: syz [ 60.966707][ T45] usb 5-1: SerialNumber: syz [ 60.972948][ T36] audit: type=1400 audit(1759369491.520:272): avc: denied { write } for pid=1549 comm="syz.6.456" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 60.979216][ T45] usb 5-1: config 0 descriptor?? [ 60.997550][ T36] audit: type=1400 audit(1759369491.520:273): avc: denied { open } for pid=1549 comm="syz.6.456" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 61.005601][ T1521] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 61.035762][ T1521] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 61.127593][ T1557] capability: warning: `syz.6.458' uses deprecated v2 capabilities in a way that may be insecure [ 61.245962][ T1521] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 61.253240][ T1521] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 61.497579][ T36] audit: type=1400 audit(1759369492.050:274): avc: denied { write } for pid=1570 comm="syz.0.463" path="socket:[13191]" dev="sockfs" ino=13191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.498471][ T1571] IPv4: Oversized IP packet from 172.20.20.170 [ 61.527308][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 61.533644][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 61.541226][ T1571] IPv4: Oversized IP packet from 172.20.20.170 [ 61.547663][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 61.553907][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 61.560839][ T1571] IPv4: Oversized IP packet from 172.20.20.170 [ 61.567209][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 61.573429][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 61.582089][ T1571] IPv4: Oversized IP packet from 172.20.20.170 [ 61.662586][ T45] Error reading MAC address [ 61.964252][ T45] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 62.114237][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 62.120712][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.131728][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.141956][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 62.154919][ T45] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 62.163975][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.172954][ T45] usb 1-1: config 0 descriptor?? [ 62.580823][ T45] microsoft 0003:045E:07DA.000A: item 0 4 0 8 parsing failed [ 62.588485][ T45] microsoft 0003:045E:07DA.000A: parse failed [ 62.594705][ T45] microsoft 0003:045E:07DA.000A: probe with driver microsoft failed with error -22 [ 62.782016][ T65] usb 1-1: USB disconnect, device number 8 [ 63.234007][ T1593] netlink: 'syz.5.470': attribute type 4 has an invalid length. [ 63.243814][ T1593] netlink: 'syz.5.470': attribute type 4 has an invalid length. [ 63.303188][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.304691][ T36] audit: type=1400 audit(1759369493.850:275): avc: denied { ioctl } for pid=1596 comm="syz.0.472" path="socket:[13757]" dev="sockfs" ino=13757 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.533434][ T9] usb 5-1: USB disconnect, device number 5 [ 63.634253][ T45] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 63.678959][ T36] audit: type=1400 audit(1759369494.230:276): avc: denied { read } for pid=1607 comm="syz.4.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.794269][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 63.800554][ T45] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 63.808798][ T45] usb 6-1: config 0 has no interface number 0 [ 63.814939][ T45] usb 6-1: config 0 interface 184 has no altsetting 0 [ 63.823116][ T45] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 63.832219][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.840262][ T45] usb 6-1: Product: syz [ 63.844498][ T45] usb 6-1: Manufacturer: syz [ 63.849102][ T45] usb 6-1: SerialNumber: syz [ 63.854364][ T45] usb 6-1: config 0 descriptor?? [ 63.860127][ T45] smsc75xx v1.0.0 [ 64.461935][ T45] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 64.472895][ T45] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 64.498862][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 64.507562][ T9] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 64.934247][ T36] audit: type=1400 audit(1759369495.480:277): avc: denied { setattr } for pid=1630 comm="syz.6.484" name="#4b" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 65.334239][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.334539][ T1149] Bluetooth: hci0: command 0x1003 tx timeout [ 66.282167][ T45] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 66.300485][ T45] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 66.313174][ T45] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 66.322760][ T45] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 66.332374][ T45] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 66.341863][ T45] usb 6-1: USB disconnect, device number 3 [ 66.878850][ T36] audit: type=1400 audit(1759369497.423:278): avc: denied { write } for pid=1688 comm="syz.5.505" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 67.892964][ T1705] syz.6.512: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0 [ 67.907991][ T1705] CPU: 0 UID: 0 PID: 1705 Comm: syz.6.512 Not tainted syzkaller #0 c28964d659af56c9aa0a1d789b6c5ee0e7b35bd1 [ 67.908027][ T1705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 67.908054][ T1705] Call Trace: [ 67.908062][ T1705] [ 67.908072][ T1705] __dump_stack+0x21/0x30 [ 67.908118][ T1705] dump_stack_lvl+0x10c/0x190 [ 67.908136][ T45] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 67.908150][ T1705] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.908185][ T1705] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 67.908216][ T1705] dump_stack+0x19/0x20 [ 67.908252][ T1705] warn_alloc+0x1bc/0x2a0 [ 67.908292][ T1705] ? stack_depot_save_flags+0x38/0x800 [ 67.908322][ T1705] ? __cfi_warn_alloc+0x10/0x10 [ 67.908359][ T1705] ? kasan_save_track+0x4f/0x80 [ 67.908397][ T1705] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 67.908425][ T1705] ? xskq_create+0x68/0x2a0 [ 67.908461][ T1705] ? xsk_init_queue+0xb6/0x120 [ 67.908497][ T1705] ? xsk_setsockopt+0x43f/0x6f0 [ 67.908532][ T1705] ? do_sock_setsockopt+0x26a/0x400 [ 67.908568][ T1705] ? __x64_sys_setsockopt+0x1b8/0x250 [ 67.908602][ T1705] ? x64_sys_call+0x2adc/0x2ee0 [ 67.908642][ T1705] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.908685][ T1705] __vmalloc_node_range_noprof+0x135/0x1420 [ 67.908728][ T1705] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 67.908767][ T1705] ? avc_has_perm+0x144/0x220 [ 67.908804][ T1705] ? kasan_save_alloc_info+0x40/0x50 [ 67.908852][ T1705] ? __kasan_kmalloc+0x96/0xb0 [ 67.908882][ T1705] vmalloc_user_noprof+0x77/0x90 [ 67.908920][ T1705] ? xskq_create+0xdb/0x2a0 [ 67.908957][ T1705] xskq_create+0xdb/0x2a0 [ 67.908995][ T1705] xsk_init_queue+0xb6/0x120 [ 67.909030][ T1705] xsk_setsockopt+0x43f/0x6f0 [ 67.909064][ T1705] ? __cfi_xsk_setsockopt+0x10/0x10 [ 67.909099][ T1705] ? do_futex+0x309/0x500 [ 67.909127][ T1705] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 67.909160][ T1705] ? security_socket_setsockopt+0x33/0xd0 [ 67.909186][ T1705] ? __cfi_xsk_setsockopt+0x10/0x10 [ 67.909220][ T1705] do_sock_setsockopt+0x26a/0x400 [ 67.909254][ T1705] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 67.909293][ T1705] __x64_sys_setsockopt+0x1b8/0x250 [ 67.909330][ T1705] x64_sys_call+0x2adc/0x2ee0 [ 67.909368][ T1705] do_syscall_64+0x58/0xf0 [ 67.909406][ T1705] ? clear_bhb_loop+0x50/0xa0 [ 67.909432][ T1705] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.909472][ T1705] RIP: 0033:0x7fe81478eec9 [ 67.909502][ T1705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.909524][ T1705] RSP: 002b:00007fe8131f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 67.909553][ T1705] RAX: ffffffffffffffda RBX: 00007fe8149e5fa0 RCX: 00007fe81478eec9 [ 67.909573][ T1705] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 67.909591][ T1705] RBP: 00007fe814811f91 R08: 0000000000000004 R09: 0000000000000000 [ 67.909608][ T1705] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.909626][ T1705] R13: 00007fe8149e6038 R14: 00007fe8149e5fa0 R15: 00007ffe027cca78 [ 67.909651][ T1705] [ 67.909843][ T1705] Mem-Info: [ 67.953472][ T36] audit: type=1400 audit(1759369498.493:279): avc: denied { ioctl } for pid=1704 comm="syz.6.512" path="socket:[14225]" dev="sockfs" ino=14225 ioctlcmd=0x6720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.958868][ T1705] active_anon:23422 inactive_anon:18 isolated_anon:0 [ 67.958868][ T1705] active_file:12721 inactive_file:13005 isolated_file:0 [ 67.958868][ T1705] unevictable:0 dirty:250 writeback:0 [ 67.958868][ T1705] slab_reclaimable:6106 slab_unreclaimable:70013 [ 67.958868][ T1705] mapped:24512 shmem:16555 pagetables:816 [ 67.958868][ T1705] sec_pagetables:0 bounce:0 [ 67.958868][ T1705] kernel_misc_reclaimable:0 [ 67.958868][ T1705] free:1503564 free_pcp:4525 free_cma:0 [ 68.084226][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 68.085548][ T45] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 68.088877][ T1705] Node 0 active_anon:93688kB inactive_anon:72kB active_file:50884kB inactive_file:52020kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98048kB dirty:1000kB writeback:0kB shmem:66220kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:5304kB pagetables:3264kB sec_pagetables:0kB all_unreclaimable? no [ 68.094645][ T45] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 68.109932][ T1705] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:68kB free_cma:0kB [ 68.110919][ T45] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 68.119012][ T1705] lowmem_reserve[]: [ 68.123975][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 68.126085][ T1705] 0 [ 68.131371][ T45] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 68.135277][ T1705] 3921 [ 68.141595][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 68.145762][ T1705] 3921 [ 68.165408][ T45] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 68.274738][ T1705] [ 68.327219][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.349980][ T1705] Normal free:3048556kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:105152kB inactive_anon:72kB active_file:50884kB inactive_file:52008kB unevictable:0kB writepending:1000kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:6496kB local_pcp:2728kB free_cma:0kB [ 68.375877][ T45] usb 1-1: config 0 descriptor?? [ 68.386731][ T1705] lowmem_reserve[]: 0 0 0 [ 68.489454][ T1705] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 68.505731][ T1705] Normal: 385*4kB (U) 523*8kB (UE) 601*16kB (UME) 561*32kB (UME) 464*64kB (UME) 26*128kB (UME) 34*256kB (M) 21*512kB (ME) 13*1024kB (ME) 12*2048kB (ME) 714*4096kB (UM) = 3048204kB [ 68.524811][ T1705] 45164 total pagecache pages [ 68.529687][ T1705] 18 pages in swap cache [ 68.534045][ T1705] Free swap = 124356kB [ 68.538392][ T1705] Total swap = 124996kB [ 68.542647][ T1705] 2097051 pages RAM [ 68.547113][ T1705] 0 pages HighMem/MovableOnly [ 68.551944][ T1705] 351537 pages reserved [ 68.556227][ T1705] 0 pages cma reserved [ 68.571216][ T1705] Memory allocations: [ 68.575416][ T1705] 0 B 0 init/main.c:1370 func:do_initcalls [ 68.582783][ T1705] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 68.590386][ T45] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 68.591019][ T1705] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 68.609389][ T389] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 68.617479][ T1705] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 68.625848][ T45] usb 1-1: USB disconnect, device number 9 [ 68.628045][ T45] usblp0: removed [ 68.635540][ T1705] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 68.643583][ T1705] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 68.652320][ T1705] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 68.660390][ T1705] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 68.668612][ T1705] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 68.676950][ T1705] 0 B 0 init/initramfs.c:101 func:find_link [ 68.784277][ T36] audit: type=1400 audit(1759369499.323:280): avc: denied { create } for pid=1716 comm="syz.6.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 68.806822][ T389] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.818303][ T389] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.828461][ T389] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 68.856025][ T389] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.884422][ T389] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.896121][ T389] usb 5-1: config 0 descriptor?? [ 69.314281][ T462] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 69.404241][ T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 69.464222][ T462] usb 1-1: Using ep0 maxpacket: 32 [ 69.470405][ T462] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 69.478987][ T462] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 69.487844][ T462] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 69.496881][ T462] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 69.506655][ T462] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 69.516396][ T462] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 69.529525][ T462] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 69.538707][ T462] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.546854][ T389] usbhid 5-1:0.0: can't add hid device: -71 [ 69.552971][ T389] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 69.561571][ T462] usb 1-1: config 0 descriptor?? [ 69.568462][ T389] usb 5-1: USB disconnect, device number 6 [ 69.574401][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 69.586152][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 69.597621][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 69.608565][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 69.620705][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.629833][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.637940][ T9] usb 6-1: Product: syz [ 69.642119][ T9] usb 6-1: Manufacturer: syz [ 69.646763][ T9] usb 6-1: SerialNumber: syz [ 69.652451][ T1725] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 69.660383][ T9] cdc_mbim 6-1:1.0: skipping garbage [ 69.768612][ T462] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 69.861090][ T1725] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 69.868391][ T1725] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 70.041375][ T36] audit: type=1400 audit(1759369500.583:281): avc: denied { mount } for pid=1731 comm="syz.4.521" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 70.084795][ T1734] ======================================================= [ 70.084795][ T1734] WARNING: The mand mount option has been deprecated and [ 70.084795][ T1734] and is ignored by this kernel. Remove the mand [ 70.084795][ T1734] option from the mount to silence this warning. [ 70.084795][ T1734] ======================================================= [ 70.129098][ T36] audit: type=1400 audit(1759369500.673:282): avc: denied { create } for pid=1733 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 70.357548][ T1743] bridge0: port 3(ip6gretap0) entered blocking state [ 70.364397][ T1743] bridge0: port 3(ip6gretap0) entered disabled state [ 70.371247][ T1743] ip6gretap0: entered allmulticast mode [ 70.377383][ T1743] ip6gretap0: entered promiscuous mode [ 70.383021][ T1743] bridge0: port 3(ip6gretap0) entered blocking state [ 70.389758][ T1743] bridge0: port 3(ip6gretap0) entered forwarding state [ 70.520497][ T1725] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 70.527942][ T1725] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 70.535370][ T9] cdc_mbim 6-1:1.0: dwNtbInMaxSize=70 is too small. Using 2048 [ 70.542967][ T9] cdc_mbim 6-1:1.0: setting rx_max = 2048 [ 70.694269][ T65] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 70.736919][ T9] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 70.744081][ T9] wwan wwan0: port wwan0mbim0 attached [ 70.751763][ T9] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 7e:f3:46:1e:ef:7d [ 70.777137][ T36] audit: type=1400 audit(1759369501.323:283): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 70.804973][ T36] audit: type=1400 audit(1759369501.323:284): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.826555][ T36] audit: type=1400 audit(1759369501.323:285): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=2600 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.848326][ T36] audit: type=1400 audit(1759369501.323:286): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2600 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.871607][ T36] audit: type=1400 audit(1759369501.323:287): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2600 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.903300][ T65] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.906775][ T9] usb 1-1: USB disconnect, device number 10 [ 70.925515][ T36] audit: type=1400 audit(1759369501.353:288): avc: denied { read } for pid=1750 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.929911][ T65] usb 7-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 70.949786][ T36] audit: type=1400 audit(1759369501.353:289): avc: denied { open } for pid=1750 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.971983][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.982790][ T9] usblp0: removed [ 71.031325][ T389] usb 6-1: USB disconnect, device number 4 [ 71.035740][ T65] usb 7-1: config 0 descriptor?? [ 71.037956][ T389] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 71.048690][ T149] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 71.078057][ T36] audit: type=1400 audit(1759369501.353:290): avc: denied { getattr } for pid=1750 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.179299][ T389] wwan wwan0: port wwan0mbim0 disconnected [ 71.642837][ T1812] Invalid ELF header magic: != ELF [ 71.664835][ T65] hid (null): report_id 0 is invalid [ 71.682533][ T65] nintendo 0003:057E:200E.000C: report_id 0 is invalid [ 71.689658][ T65] nintendo 0003:057E:200E.000C: item 0 0 1 8 parsing failed [ 71.697412][ T65] nintendo 0003:057E:200E.000C: HID parse failed [ 71.704557][ T65] nintendo 0003:057E:200E.000C: probe - fail = -22 [ 71.711231][ T65] nintendo 0003:057E:200E.000C: probe with driver nintendo failed with error -22 [ 71.889281][ T9] usb 7-1: USB disconnect, device number 2 [ 73.854389][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 74.004268][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 74.012138][ T9] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 74.020537][ T9] usb 7-1: config 0 has no interface number 0 [ 74.028772][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 74.038402][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.046686][ T9] usb 7-1: Product: syz [ 74.050985][ T9] usb 7-1: Manufacturer: syz [ 74.055705][ T9] usb 7-1: SerialNumber: syz [ 74.063763][ T9] usb 7-1: config 0 descriptor?? [ 74.072977][ T9] smsc95xx v2.0.0 [ 74.513241][ T9] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 74.524108][ T9] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 76.198587][ T9] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 76.209503][ T9] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 76.218816][ T9] usb 7-1: USB disconnect, device number 3 [ 76.372683][ T1910] netlink: 'syz.5.572': attribute type 27 has an invalid length. [ 76.415558][ T1910] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 76.567620][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 76.567641][ T36] audit: type=1400 audit(1759369507.113:336): avc: denied { create } for pid=1914 comm="syz.5.574" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 76.602876][ T36] audit: type=1400 audit(1759369507.133:337): avc: denied { unlink } for pid=1113 comm="syz-executor" name="file2" dev="tmpfs" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 76.625850][ T36] audit: type=1400 audit(1759369507.143:338): avc: denied { mount } for pid=1916 comm="syz.5.575" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.648025][ T36] audit: type=1400 audit(1759369507.143:339): avc: denied { unmount } for pid=1916 comm="syz.5.575" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.667925][ T36] audit: type=1400 audit(1759369507.143:340): avc: denied { remount } for pid=1916 comm="syz.5.575" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.916624][ T36] audit: type=1400 audit(1759369507.463:341): avc: denied { write } for pid=1933 comm="syz.6.583" name="tcp6" dev="proc" ino=4026532413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 76.975169][ T1938] netlink: 'syz.4.582': attribute type 32 has an invalid length. [ 76.984239][ T1938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.582'. [ 77.000094][ T1937] kvm: emulating exchange as write [ 77.043704][ T1945] syz.4.586 uses obsolete (PF_INET,SOCK_PACKET) [ 77.804309][ T65] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 77.955425][ T65] usb 1-1: config 0 has no interfaces? [ 77.962902][ T65] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 77.972441][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.980604][ T65] usb 1-1: Product: syz [ 77.984884][ T65] usb 1-1: Manufacturer: syz [ 77.989507][ T65] usb 1-1: SerialNumber: syz [ 77.994941][ T65] usb 1-1: config 0 descriptor?? [ 78.204598][ T65] usb 1-1: USB disconnect, device number 11 [ 78.662505][ T36] audit: type=1400 audit(1759369509.203:342): avc: denied { associate } for pid=1994 comm="syz.4.603" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 78.902774][ T2002] veth0_vlan: entered allmulticast mode [ 78.914282][ T2002] veth0_vlan: left promiscuous mode [ 78.920184][ T2002] veth0_vlan: entered promiscuous mode [ 79.316617][ T36] audit: type=1400 audit(1759369509.863:343): avc: denied { map } for pid=2005 comm="syz.4.606" path="socket:[16227]" dev="sockfs" ino=16227 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 79.549777][ T2018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'. [ 79.595686][ T2018] bridge_slave_1: left allmulticast mode [ 79.601562][ T2018] bridge_slave_1: left promiscuous mode [ 79.611341][ T2018] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.622558][ T2018] bridge_slave_0: left allmulticast mode [ 79.628553][ T2018] bridge_slave_0: left promiscuous mode [ 79.635923][ T2018] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.684686][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 81.003348][ T2047] kvm: MWAIT instruction emulated as NOP! [ 81.749861][ T1149] Bluetooth: hci0: command 0x1003 tx timeout [ 81.756231][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 81.773819][ T36] audit: type=1400 audit(1759369512.243:344): avc: denied { bind } for pid=2060 comm="syz.5.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.453104][ T2076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.631'. [ 82.702241][ T36] audit: type=1400 audit(1759369513.243:345): avc: denied { name_bind } for pid=2088 comm="syz.6.637" src=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 82.874228][ T483] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 83.045514][ T483] usb 1-1: config 0 interface 0 has no altsetting 0 [ 83.052309][ T483] usb 1-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 83.061460][ T483] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.070417][ T483] usb 1-1: config 0 descriptor?? [ 83.506774][ T483] usbhid 1-1:0.0: can't add hid device: -71 [ 83.512824][ T483] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 83.521526][ T483] usb 1-1: USB disconnect, device number 12 [ 84.767877][ T36] audit: type=1400 audit(1759369515.313:346): avc: denied { name_bind } for pid=2147 comm="syz.6.648" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 84.850923][ T36] audit: type=1400 audit(1759369515.393:347): avc: denied { write } for pid=483 comm="kworker/0:5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19950 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.668215][ T2163] fuse: Bad value for 'fd' [ 85.693039][ T2166] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaaaaaaa [ 86.544358][ T36] audit: type=1326 audit(1759369517.043:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2180 comm="syz.4.660" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd00998eec9 code=0x0 [ 87.400464][ T36] audit: type=1400 audit(1759369517.943:349): avc: denied { bpf } for pid=2214 comm="syz.0.672" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.422159][ T2215] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2215 comm=syz.0.672 [ 87.493333][ T2217] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 87.500426][ T2217] overlayfs: failed to set xattr on upper [ 87.506441][ T2217] overlayfs: ...falling back to redirect_dir=nofollow. [ 87.513324][ T2217] overlayfs: ...falling back to uuid=null. [ 87.656169][ T2224] tipc: Started in network mode [ 87.661184][ T2224] tipc: Node identity 4, cluster identity 4711 [ 87.667472][ T2224] tipc: Node number set to 4 [ 87.819759][ T2231] tipc: Started in network mode [ 87.832555][ T2231] tipc: Node identity b9, cluster identity 4711 [ 87.840664][ T2231] tipc: Node number set to 185 [ 87.998113][ T36] audit: type=1400 audit(1759369518.543:350): avc: denied { write } for pid=2244 comm="syz.6.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.059707][ T2251] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:169 [ 88.106312][ T2251] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 88.126077][ T2251] kvm: pic: level sensitive irq not supported [ 88.126161][ T2251] kvm: pic: non byte read [ 88.137467][ T2251] kvm: pic: level sensitive irq not supported [ 88.137542][ T2251] kvm: pic: non byte read [ 88.148715][ T2251] kvm: pic: level sensitive irq not supported [ 88.148781][ T2251] kvm: pic: non byte read [ 88.159852][ T2251] kvm: pic: level sensitive irq not supported [ 88.159915][ T2251] kvm: pic: non byte read [ 88.170703][ T2251] kvm: pic: level sensitive irq not supported [ 88.170764][ T2251] kvm: pic: non byte read [ 88.181643][ T2251] kvm: pic: level sensitive irq not supported [ 88.181706][ T2251] kvm: pic: non byte read [ 88.192510][ T2251] kvm: pic: level sensitive irq not supported [ 88.192584][ T2251] kvm: pic: non byte read [ 88.203450][ T2251] kvm: pic: level sensitive irq not supported [ 88.203515][ T2251] kvm: pic: non byte read [ 88.214361][ T2251] kvm: pic: level sensitive irq not supported [ 88.214506][ T2251] kvm: pic: non byte read [ 88.225759][ T2251] kvm: pic: level sensitive irq not supported [ 88.225883][ T2251] kvm: pic: non byte read [ 88.398737][ T2269] netlink: 20 bytes leftover after parsing attributes in process `syz.6.696'. [ 88.436535][ T36] audit: type=1400 audit(1759369518.983:351): avc: denied { setopt } for pid=2270 comm="syz.6.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.674070][ T2282] Zero length message leads to an empty skb [ 88.692372][ T2286] netlink: 8 bytes leftover after parsing attributes in process `syz.5.703'. [ 88.702333][ T2286] netlink: 8 bytes leftover after parsing attributes in process `syz.5.703'. [ 88.711312][ T2286] net_ratelimit: 86 callbacks suppressed [ 88.711331][ T2286] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 88.733265][ T2287] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 88.788448][ T2298] netlink: 'syz.5.708': attribute type 39 has an invalid length. [ 88.946258][ T2325] netlink: 'syz.4.721': attribute type 33 has an invalid length. [ 88.954108][ T2325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.721'. [ 89.009115][ T2338] bridge0: port 1(bridge_slave_0) entered listening state [ 89.051516][ T2350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.733'. [ 89.146871][ T36] audit: type=1400 audit(1759369519.693:352): avc: denied { read } for pid=2370 comm="syz.4.743" path="socket:[19398]" dev="sockfs" ino=19398 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 89.256135][ T2394] tipc: Enabling of bearer rejected, failed to enable media [ 89.439222][ T2438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.775'. [ 89.701763][ T2495] veth1_macvtap: left promiscuous mode [ 89.709402][ T2495] macsec0: entered allmulticast mode [ 89.723147][ T2495] veth1_macvtap: entered promiscuous mode [ 89.730281][ T2495] veth1_macvtap: entered allmulticast mode [ 89.738120][ T2495] macsec0: left allmulticast mode [ 89.743522][ T2495] veth1_macvtap: left allmulticast mode [ 89.935329][ T36] audit: type=1326 audit(1759369520.483:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2521 comm="syz.0.815" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7faff6185d67 code=0x0 [ 89.992839][ T2540] netlink: 324 bytes leftover after parsing attributes in process `syz.4.824'. [ 90.254217][ T483] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 90.412812][ T2581] netlink: 124 bytes leftover after parsing attributes in process `syz.5.844'. [ 90.426490][ T483] usb 7-1: Using ep0 maxpacket: 32 [ 90.441453][ T483] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.464829][ T483] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.479162][ T483] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 90.488539][ T483] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.504514][ T483] usb 7-1: config 0 descriptor?? [ 90.914133][ T483] koneplus 0003:1E7D:2D51.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.6-1/input0 [ 90.985916][ T2592] netlink: 4 bytes leftover after parsing attributes in process `syz.5.848'. [ 91.112830][ T483] koneplus 0003:1E7D:2D51.000D: couldn't init struct koneplus_device [ 91.122959][ T483] koneplus 0003:1E7D:2D51.000D: couldn't install mouse [ 91.130734][ T483] koneplus 0003:1E7D:2D51.000D: probe with driver koneplus failed with error -71 [ 91.141001][ T483] usb 7-1: USB disconnect, device number 4 [ 91.276771][ T2619] wireguard: wg0: Could not create IPv4 socket [ 91.534788][ T36] audit: type=1400 audit(1759369522.083:354): avc: denied { accept } for pid=2650 comm="syz.4.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 91.874243][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 92.045334][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 92.065043][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.074235][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 92.087959][ T9] usb 7-1: SerialNumber: syz [ 92.533796][ T36] audit: type=1400 audit(1759369523.073:355): avc: denied { bind } for pid=2711 comm="syz.5.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.714443][ T9] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 93.116566][ T483] usb 7-1: USB disconnect, device number 5 [ 93.122779][ T483] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 93.336382][ T2820] fuse: Bad value for 'fd' [ 93.380697][ T2826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.936'. [ 93.589349][ T2851] netlink: 'syz.5.948': attribute type 27 has an invalid length. [ 93.636836][ T2855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.636953][ T2855] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 93.643905][ T2855] rust_binder: Read failure Err(EAGAIN) in pid:225 [ 93.652214][ T2855] rust_binder: 225: no such ref 3 [ 93.664359][ T2855] rust_binder: inc_ref_done called when no active inc_refs [ 93.664382][ T2855] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:225 [ 93.914388][ T483] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 93.931555][ T2870] overlayfs: failed to clone upperpath [ 94.095430][ T483] usb 7-1: config 0 has no interfaces? [ 94.101191][ T483] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 94.110524][ T483] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.122357][ T36] audit: type=1400 audit(1759369524.663:356): avc: denied { nlmsg_read } for pid=2890 comm="syz.4.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.122735][ T483] usb 7-1: config 0 descriptor?? [ 94.174636][ T2895] @0Ù: renamed from bond_slave_1 [ 94.197502][ T2901] netlink: 'syz.0.972': attribute type 27 has an invalid length. [ 94.351732][ T2922] overlayfs: failed to clone upperpath [ 94.369722][ T65] usb 7-1: USB disconnect, device number 6 [ 94.466873][ T2942] overlayfs: failed to clone upperpath [ 95.097000][ T2968] overlayfs: failed to clone upperpath [ 96.138892][ T3006] sit0: entered promiscuous mode [ 96.145193][ T3006] netlink: 'syz.6.1022': attribute type 1 has an invalid length. [ 96.153059][ T3006] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1022'. [ 96.357231][ T36] audit: type=1400 audit(1759369526.903:357): avc: denied { mount } for pid=3016 comm="syz.5.1027" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 96.361461][ T3017] overlayfs: failed to clone lowerpath [ 96.420553][ T3019] netlink: 'syz.6.1028': attribute type 4 has an invalid length. [ 96.800100][ T36] audit: type=1400 audit(1759369527.343:358): avc: denied { read } for pid=3037 comm="syz.0.1036" name="file0" dev="tmpfs" ino=1608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 96.822709][ T36] audit: type=1400 audit(1759369527.343:359): avc: denied { open } for pid=3037 comm="syz.0.1036" path="/285/file0" dev="tmpfs" ino=1608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 96.996548][ T3054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1043'. [ 97.006194][ T3054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1043'. [ 97.052827][ T36] audit: type=1326 audit(1759369527.593:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3055 comm="syz.0.1044" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7faff6185d67 code=0x0 [ 97.529298][ T36] audit: type=1326 audit(1759369528.073:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3059 comm="syz.6.1045" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe81478eec9 code=0x0 [ 97.623185][ T3074] netlink: 'syz.5.1051': attribute type 27 has an invalid length. [ 98.423042][ T3095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:280 [ 98.445223][ T3095] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 98.465448][ T3095] kvm: pic: non byte read [ 98.470242][ T3095] kvm: pic: level sensitive irq not supported [ 98.470320][ T3095] kvm: pic: non byte read [ 98.481223][ T3095] kvm: pic: level sensitive irq not supported [ 98.481292][ T3095] kvm: pic: non byte read [ 98.492001][ T3095] kvm: pic: level sensitive irq not supported [ 98.492047][ T3095] kvm: pic: non byte read [ 98.579768][ T3099] netlink: 'syz.6.1061': attribute type 4 has an invalid length. [ 98.588062][ T3099] netlink: 'syz.6.1061': attribute type 4 has an invalid length. [ 99.195183][ T3130] netlink: 'syz.4.1074': attribute type 4 has an invalid length. [ 99.224264][ T3130] netlink: 'syz.4.1074': attribute type 4 has an invalid length. [ 99.423271][ T3148] fuse: Bad value for 'fd' [ 99.548799][ T3151] netlink: 1351 bytes leftover after parsing attributes in process `syz.6.1082'. [ 100.905891][ T3185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1098'. [ 101.251195][ T3210] bridge0: port 3(veth0_to_team) entered blocking state [ 101.258306][ T3210] bridge0: port 3(veth0_to_team) entered disabled state [ 101.276672][ T3210] veth0_to_team: entered allmulticast mode [ 101.284957][ T3210] veth0_to_team: entered promiscuous mode [ 101.291695][ T3210] bridge0: port 3(veth0_to_team) entered blocking state [ 101.298676][ T3210] bridge0: port 3(veth0_to_team) entered forwarding state [ 101.342650][ T3215] overlayfs: failed to clone upperpath [ 101.734211][ T462] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 101.743462][ T3231] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.809681][ T3241] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1123'. [ 101.832572][ T3243] tipc: Can't bind to reserved service type 0 [ 101.905625][ T462] usb 7-1: config 1 has an invalid interface number: 146 but max is 0 [ 101.919962][ T462] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.930145][ T462] usb 7-1: config 1 has no interface number 0 [ 101.937625][ T462] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=fd.eb [ 101.946886][ T462] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.955067][ T462] usb 7-1: Product: syz [ 101.959269][ T462] usb 7-1: Manufacturer: syz [ 101.963890][ T462] usb 7-1: SerialNumber: syz [ 101.970416][ T462] usbserial_generic 7-1:1.146: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 102.515858][ T3255] incfs: ino conflict with backing FS 1 [ 102.516851][ T462] usbserial_generic 7-1:1.146: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 102.532445][ T462] usbserial_generic 7-1:1.146: device has no bulk endpoints [ 102.533291][ T3255] incfs: ino conflict with backing FS 1 [ 102.541099][ T462] usb 7-1: USB disconnect, device number 7 [ 102.692613][ T3266] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1133'. [ 103.418967][ T3296] incfs: ino conflict with backing FS 1 [ 103.433224][ T3296] incfs: ino conflict with backing FS 1 [ 103.571690][ T3313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1153'. [ 103.686023][ T3321] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1157'. [ 104.095696][ T3368] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 104.125449][ T3368] kvm: pic: level sensitive irq not supported [ 104.125556][ T3368] kvm: pic: non byte read [ 104.136425][ T3368] kvm: pic: level sensitive irq not supported [ 104.136502][ T3368] kvm: pic: non byte read [ 104.147334][ T3368] kvm: pic: level sensitive irq not supported [ 104.147396][ T3368] kvm: pic: non byte read [ 104.158212][ T3368] kvm: pic: level sensitive irq not supported [ 104.158274][ T3368] kvm: pic: non byte read [ 104.495196][ T3406] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 104.514273][ T3413] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1199'. [ 104.536275][ T3406] kvm: pic: level sensitive irq not supported [ 104.536346][ T3406] kvm: pic: non byte read [ 104.547210][ T3406] kvm: pic: level sensitive irq not supported [ 104.547293][ T3406] kvm: pic: non byte read [ 104.558095][ T3406] kvm: pic: level sensitive irq not supported [ 104.558160][ T3406] kvm: pic: non byte read [ 104.569533][ T3406] kvm: pic: level sensitive irq not supported [ 104.569602][ T3406] kvm: pic: non byte read [ 104.761065][ T3428] overlayfs: failed to clone lowerpath [ 104.804858][ T3435] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1209'. [ 104.947820][ T3455] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1219'. [ 105.144036][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 105.214021][ T3493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1236'. [ 105.269668][ T36] audit: type=1400 audit(1759369535.813:362): avc: denied { wake_alarm } for pid=3494 comm="syz.0.1237" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.014836][ T3633] GUP no longer grows the stack in syz.5.1304 (3633): 200000005000-200000008000 (200000004000) [ 107.025603][ T3633] CPU: 1 UID: 0 PID: 3633 Comm: syz.5.1304 Not tainted syzkaller #0 c28964d659af56c9aa0a1d789b6c5ee0e7b35bd1 [ 107.025638][ T3633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 107.025654][ T3633] Call Trace: [ 107.025661][ T3633] [ 107.025670][ T3633] __dump_stack+0x21/0x30 [ 107.025707][ T3633] dump_stack_lvl+0x10c/0x190 [ 107.025739][ T3633] ? __cfi_dump_stack_lvl+0x10/0x10 [ 107.025771][ T3633] ? futex_lock_pi_atomic+0xdd/0xc70 [ 107.025801][ T3633] dump_stack+0x19/0x20 [ 107.025849][ T3633] fixup_user_fault+0x63d/0x6d0 [ 107.025881][ T3633] fault_in_user_writeable+0x76/0xe0 [ 107.025906][ T3633] futex_lock_pi+0x258/0xa10 [ 107.025933][ T3633] ? __asan_memcpy+0x5a/0x80 [ 107.025956][ T3633] ? __cfi_futex_lock_pi+0x10/0x10 [ 107.025986][ T3633] ? __cfi_futex_wake_mark+0x10/0x10 [ 107.026017][ T3633] ? futex_setup_timer+0xb4/0xd0 [ 107.026050][ T3633] ? __cfi_futex_wake_mark+0x10/0x10 [ 107.026082][ T3633] ? __kasan_check_write+0x18/0x20 [ 107.026121][ T3633] ? __ia32_sys_rt_sigreturn+0x687/0x7a0 [ 107.026162][ T3633] do_futex+0x25c/0x500 [ 107.026188][ T3633] ? __cfi_do_futex+0x10/0x10 [ 107.026215][ T3633] __se_sys_futex+0x28f/0x300 [ 107.026242][ T3633] ? __x64_sys_futex+0x110/0x110 [ 107.026270][ T3633] __x64_sys_futex+0xe9/0x110 [ 107.026296][ T3633] x64_sys_call+0x227f/0x2ee0 [ 107.026332][ T3633] do_syscall_64+0x58/0xf0 [ 107.026363][ T3633] ? clear_bhb_loop+0x50/0xa0 [ 107.026387][ T3633] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 107.026425][ T3633] RIP: 0033:0x7fc6e678eec9 [ 107.026445][ T3633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.026467][ T3633] RSP: 002b:00007fc6e51f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 107.026494][ T3633] RAX: ffffffffffffffda RBX: 00007fc6e69e5fa0 RCX: 00007fc6e678eec9 [ 107.026514][ T3633] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 107.026531][ T3633] RBP: 00007fc6e6811f91 R08: 0000000000000000 R09: 0000000000000000 [ 107.026552][ T3633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.026567][ T3633] R13: 00007fc6e69e6038 R14: 00007fc6e69e5fa0 R15: 00007ffc63328508 [ 107.026589][ T3633] [ 107.255025][ T1149] Bluetooth: hci0: command 0x1003 tx timeout [ 107.261078][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 107.359037][ T36] audit: type=1400 audit(1759369537.903:363): avc: denied { setopt } for pid=3640 comm="syz.0.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 107.378841][ T36] audit: type=1400 audit(1759369537.903:364): avc: denied { connect } for pid=3640 comm="syz.0.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 107.506425][ T36] audit: type=1400 audit(1759369538.053:365): avc: denied { sqpoll } for pid=3662 comm="syz.5.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 107.590269][ T3675] netlink: 'syz.5.1324': attribute type 27 has an invalid length. [ 107.690226][ T3679] overlayfs: failed to clone upperpath [ 107.870782][ T3690] tipc: Enabled bearer , priority 24 [ 107.917873][ T3695] bridge0: port 4(veth0_to_team) entered blocking state [ 107.924959][ T3695] bridge0: port 4(veth0_to_team) entered disabled state [ 107.932101][ T3695] veth0_to_team: entered allmulticast mode [ 107.938851][ T3695] veth0_to_team: entered promiscuous mode [ 108.055416][ T3705] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1337'. [ 108.478372][ T3724] overlayfs: failed to clone upperpath [ 108.756193][ T3736] tipc: Enabling of bearer rejected, failed to enable media [ 109.225012][ T3759] overlayfs: failed to clone upperpath [ 109.265567][ T36] audit: type=1326 audit(1759369539.813:366): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3762 comm="syz.6.1363" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe81478eec9 code=0x0 [ 109.322081][ T3765] rust_binder: Error while translating object. [ 109.322116][ T3765] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 109.328379][ T3765] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:409 [ 109.730505][ T36] audit: type=1400 audit(1759369540.273:367): avc: denied { bind } for pid=3794 comm="syz.0.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.815545][ T3811] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1384'. [ 109.826256][ T36] audit: type=1400 audit(1759369540.373:368): avc: denied { ioctl } for pid=3810 comm="syz.5.1384" path="socket:[25991]" dev="sockfs" ino=25991 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.863128][ T36] audit: type=1400 audit(1759369540.393:369): avc: denied { accept } for pid=3810 comm="syz.5.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 110.298927][ T3839] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:417 [ 110.394495][ T3857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1405'. [ 110.414202][ T3857] bridge_slave_0 (unregistering): left promiscuous mode [ 110.430263][ T3857] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.450206][ T36] audit: type=1400 audit(1759369540.993:370): avc: denied { listen } for pid=3856 comm="syz.4.1405" path=2F3338342FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 110.548133][ T3876] overlayfs: missing 'lowerdir' [ 110.791220][ T3898] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1423'. [ 111.022959][ T3919] bridge0: port 1(veth0_to_team) entered blocking state [ 111.031694][ T3919] bridge0: port 1(veth0_to_team) entered disabled state [ 111.039557][ T3919] veth0_to_team: entered allmulticast mode [ 111.046618][ T3919] veth0_to_team: entered promiscuous mode [ 111.064688][ T3919] bridge0: port 1(veth0_to_team) entered blocking state [ 111.071673][ T3919] bridge0: port 1(veth0_to_team) entered forwarding state [ 111.405702][ T3951] netlink: 'syz.0.1449': attribute type 27 has an invalid length. [ 111.586576][ T3980] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1463'. [ 111.830871][ T4010] tipc: Started in network mode [ 111.836044][ T4010] tipc: Node identity ac14142f, cluster identity 4711 [ 111.843137][ T4010] tipc: Enabling of bearer rejected, failed to enable media [ 111.881030][ T4014] overlayfs: failed to clone upperpath [ 112.044704][ T4025] rust_binder: 436: no such ref 3 [ 112.375147][ T4049] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1495'. [ 112.497875][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 112.517420][ T4057] Bluetooth: hci0: Frame reassembly failed (-90) [ 112.625146][ T4066] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1504'. [ 113.163838][ T4077] overlayfs: failed to clone upperpath [ 113.829656][ T4121] overlayfs: failed to clone upperpath [ 114.594216][ T1149] Bluetooth: hci0: command 0x1003 tx timeout [ 114.600276][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 115.416031][ T4165] overlayfs: failed to clone upperpath [ 116.582570][ T4185] overlayfs: failed to clone upperpath [ 116.662757][ T4197] 9pnet_fd: Insufficient options for proto=fd [ 116.712290][ T4207] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1568'. [ 116.832162][ T4216] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1572'. [ 117.260210][ T9] rust_binder: get_current_thread was called from the wrong process. [ 118.434205][ T9] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 118.605278][ T9] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 118.613529][ T9] usb 7-1: config 1 has no interface number 0 [ 118.619661][ T9] usb 7-1: config 1 interface 105 has no altsetting 0 [ 118.627876][ T9] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 118.636952][ T9] usb 7-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 118.645488][ T9] usb 7-1: Product: syz [ 118.649656][ T9] usb 7-1: Manufacturer: syz [ 118.654286][ T9] usb 7-1: SerialNumber: syz [ 119.081579][ T4289] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 119.195841][ T36] audit: type=1400 audit(1759369549.743:371): avc: denied { getopt } for pid=4300 comm="syz.4.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.234209][ T4304] netlink: 'syz.4.1610': attribute type 4 has an invalid length. [ 119.242169][ T4304] netlink: 'syz.4.1610': attribute type 21 has an invalid length. [ 119.250106][ T4304] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1610'. [ 119.260399][ T36] audit: type=1400 audit(1759369549.803:372): avc: denied { relabelfrom } for pid=4303 comm="syz.4.1610" name="" dev="pipefs" ino=28269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 119.483510][ T9] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 119.504209][ T9] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 119.515155][ T9] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 119.535949][ T9] aqc111 7-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.6-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, ce:65:4c:55:da:0c [ 119.550390][ T9] usb 7-1: USB disconnect, device number 8 [ 119.557508][ T9] aqc111 7-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.6-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 119.627179][ T9] aqc111 7-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 119.654213][ T9] aqc111 7-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 119.663594][ T9] aqc111 7-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 120.051456][ T4354] binder: Unknown parameter 'rw' [ 120.169986][ T4359] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 120.319105][ T36] audit: type=1400 audit(1759369550.863:373): avc: denied { ioctl } for pid=4367 comm="syz.6.1623" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 120.704233][ T45] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 120.854202][ T45] usb 7-1: Using ep0 maxpacket: 16 [ 120.860663][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.871624][ T45] usb 7-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 120.880707][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.889851][ T45] usb 7-1: config 0 descriptor?? [ 121.299684][ T45] usbhid 7-1:0.0: can't add hid device: -71 [ 121.307463][ T45] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 121.316088][ T45] usb 7-1: USB disconnect, device number 9 [ 121.742532][ T4441] overlayfs: missing 'lowerdir' [ 122.282042][ T4468] tipc: Enabled bearer , priority 24 [ 122.344557][ T36] audit: type=1326 audit(1759369552.893:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.0.1666" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faff618eec9 code=0x0 [ 122.671140][ T4478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.679731][ T4478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.904001][ T4491] netlink: 'syz.4.1674': attribute type 11 has an invalid length. [ 123.200972][ T4499] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 123.210200][ T4499] overlayfs: missing 'lowerdir' [ 123.218530][ T36] audit: type=1400 audit(1759369553.763:375): avc: denied { mounton } for pid=4498 comm="syz.0.1678" path="/478/file0" dev="tmpfs" ino=2625 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 123.291098][ T4514] netlink: 'syz.6.1685': attribute type 4 has an invalid length. [ 123.302525][ T4514] netlink: 'syz.6.1685': attribute type 5 has an invalid length. [ 123.310535][ T4514] netlink: 'syz.6.1685': attribute type 1 has an invalid length. [ 123.391724][ T36] audit: type=1400 audit(1759369553.933:376): avc: denied { getopt } for pid=4513 comm="syz.6.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.783791][ T36] audit: type=1400 audit(1759369554.323:377): avc: denied { getopt } for pid=4536 comm="syz.4.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 123.854484][ T36] audit: type=1326 audit(1759369554.403:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4536 comm="syz.4.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00998eec9 code=0x7fc00000 [ 123.880667][ T36] audit: type=1326 audit(1759369554.403:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4536 comm="syz.4.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00998eec9 code=0x7fc00000 [ 124.042309][ T36] audit: type=1400 audit(1759369554.583:380): avc: denied { create } for pid=4552 comm="syz.0.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.680080][ T4578] netlink: 'syz.0.1713': attribute type 16 has an invalid length. [ 124.688057][ T4578] netlink: 'syz.0.1713': attribute type 4 has an invalid length. [ 124.695894][ T4578] netlink: 64094 bytes leftover after parsing attributes in process `syz.0.1713'. [ 124.808460][ T4604] usb usb7: usbfs: process 4604 (syz.6.1723) did not claim interface 0 before use [ 124.876139][ T4613] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:549 [ 124.900954][ T4618] rust_binder: Error while translating object. [ 124.910201][ T4618] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 124.916441][ T4618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:553 [ 124.963489][ T36] audit: type=1400 audit(1759369555.503:381): avc: denied { execute } for pid=4619 comm="syz.6.1730" dev="tmpfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.993645][ T36] audit: type=1400 audit(1759369555.503:382): avc: denied { execute_no_trans } for pid=4619 comm="syz.6.1730" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 125.334739][ T36] audit: type=1400 audit(1759369555.883:383): avc: denied { read } for pid=4655 comm="syz.6.1743" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 125.335712][ T4656] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 125.365082][ T36] audit: type=1326 audit(1759369555.913:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4651 comm="syz.5.1742" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6e678eec9 code=0x0 [ 125.391948][ T36] audit: type=1400 audit(1759369555.913:385): avc: denied { map } for pid=4655 comm="syz.6.1743" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.420372][ T36] audit: type=1400 audit(1759369555.913:386): avc: denied { execute } for pid=4655 comm="syz.6.1743" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.489202][ T4670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1747'. [ 125.566272][ T36] audit: type=1400 audit(1759369556.113:387): avc: denied { create } for pid=4679 comm="syz.0.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 125.587829][ T36] audit: type=1400 audit(1759369556.113:388): avc: denied { create } for pid=4679 comm="syz.0.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 125.688435][ T36] audit: type=1400 audit(1759369556.233:389): avc: denied { lock } for pid=4681 comm="syz.0.1752" path="socket:[30012]" dev="sockfs" ino=30012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 126.259624][ T4707] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1762'. [ 126.280694][ T4709] netlink: 'syz.0.1763': attribute type 2 has an invalid length. [ 126.289911][ T36] audit: type=1326 audit(1759369556.843:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.0.1763" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faff618eec9 code=0x0 [ 126.842068][ T4731] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1772'. [ 126.883057][ T4740] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.883307][ T4740] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 126.893186][ T4740] rust_binder: Error while translating object. [ 126.903805][ T4740] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 126.910985][ T4740] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:599 [ 126.985391][ T4745] netlink: 'syz.4.1778': attribute type 1 has an invalid length. [ 127.053325][ T4759] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1782'. [ 127.941111][ T4797] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 127.941137][ T4797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:614 [ 128.006011][ T4804] fuse: Unknown parameter 'fœå0x0000000000000005' [ 128.666945][ T4845] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1815'. [ 129.042536][ T4908] capability: warning: `syz.5.1842' uses 32-bit capabilities (legacy support in use) [ 129.924236][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 129.988742][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 129.988761][ T36] audit: type=1400 audit(1759369560.540:395): avc: denied { accept } for pid=4954 comm="syz.5.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 130.033049][ T4960] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1866'. [ 130.086421][ T36] audit: type=1400 audit(1759369560.640:396): avc: denied { mount } for pid=4967 comm="syz.5.1870" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 130.109761][ T9] usb 7-1: config 7 descriptor has 1 excess byte, ignoring [ 130.119870][ T9] usb 7-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 130.130664][ T9] usb 7-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 130.141373][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.150611][ T9] usb 7-1: Product: syz [ 130.155169][ T9] usb 7-1: Manufacturer: syz [ 130.159929][ T9] usb 7-1: SerialNumber: syz [ 130.175832][ T9] rndis_host 7-1:7.0: skipping garbage [ 130.181448][ T9] usb 7-1: bad CDC descriptors [ 130.218419][ T4989] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1880'. [ 130.242476][ T4991] netlink: 'syz.0.1881': attribute type 3 has an invalid length. [ 130.391096][ T36] audit: type=1400 audit(1759369560.940:397): avc: denied { getopt } for pid=5002 comm="syz.5.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 130.435607][ T9] usb 7-1: USB disconnect, device number 11 [ 130.487114][ T36] audit: type=1326 audit(1759369561.040:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5011 comm="syz.5.1889" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc6e678eec9 code=0x0 [ 130.937209][ T5034] tipc: Started in network mode [ 130.942094][ T5034] tipc: Node identity , cluster identity 4711 [ 130.948365][ T5034] tipc: Failed to obtain node identity [ 130.954396][ T5034] tipc: Enabling of bearer rejected, failed to enable media [ 130.966625][ T5034] /dev/loop0: Can't lookup blockdev [ 130.970264][ T36] audit: type=1400 audit(1759369561.520:399): avc: denied { create } for pid=5035 comm="syz.6.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 131.066162][ T36] audit: type=1326 audit(1759369561.620:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.4.1900" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd00998eec9 code=0x0 [ 131.220802][ T5062] can0: slcan on ptm0. [ 131.236535][ T36] audit: type=1400 audit(1759369561.790:401): avc: denied { create } for pid=5056 comm="syz.0.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 131.484206][ T45] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 131.568411][ T5095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1917'. [ 131.622989][ T5103] fuse: Bad value for 'group_id' [ 131.628035][ T5103] fuse: Bad value for 'group_id' [ 131.648364][ T45] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.658909][ T45] usb 7-1: config 0 has no interfaces? [ 131.678827][ T45] usb 7-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 131.693840][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.709787][ T45] usb 7-1: config 0 descriptor?? [ 131.814342][ T5126] overlayfs: failed to resolve './file1': -2 [ 131.918712][ T9] usb 7-1: USB disconnect, device number 12 [ 131.984821][ T5062] can0 (unregistered): slcan off ptm0. [ 132.532851][ T5203] rust_binder: Write failure EFAULT in pid:643 [ 132.843442][ T5223] FAULT_INJECTION: forcing a failure. [ 132.843442][ T5223] name failslab, interval 1, probability 0, space 0, times 1 [ 132.867847][ T5223] CPU: 0 UID: 0 PID: 5223 Comm: syz.6.1960 Not tainted syzkaller #0 c28964d659af56c9aa0a1d789b6c5ee0e7b35bd1 [ 132.867884][ T5223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 132.867898][ T5223] Call Trace: [ 132.867906][ T5223] [ 132.867915][ T5223] __dump_stack+0x21/0x30 [ 132.867951][ T5223] dump_stack_lvl+0x10c/0x190 [ 132.867980][ T5223] ? __cfi_dump_stack_lvl+0x10/0x10 [ 132.868012][ T5223] dump_stack+0x19/0x20 [ 132.868046][ T5223] should_fail_ex+0x3d9/0x530 [ 132.868070][ T5223] should_failslab+0xac/0x100 [ 132.868097][ T5223] __kmalloc_cache_noprof+0x41/0x3c0 [ 132.868120][ T5223] ? syslog_print_all+0xef/0x4b0 [ 132.868146][ T5223] syslog_print_all+0xef/0x4b0 [ 132.868171][ T5223] ? syslog_print+0x660/0x660 [ 132.868196][ T5223] ? selinux_capable+0x38/0x50 [ 132.868231][ T5223] ? selinux_syslog+0x10c/0x130 [ 132.868271][ T5223] ? bpf_lsm_syslog+0xd/0x20 [ 132.868294][ T5223] do_syslog+0x385/0x760 [ 132.868317][ T5223] ? __cfi_do_syslog+0x10/0x10 [ 132.868340][ T5223] ? __kasan_check_write+0x18/0x20 [ 132.868374][ T5223] ? fput+0x1a5/0x240 [ 132.868402][ T5223] ? __cfi_ksys_write+0x10/0x10 [ 132.868423][ T5223] ? __kasan_check_read+0x15/0x20 [ 132.868458][ T5223] __x64_sys_syslog+0x80/0x90 [ 132.868481][ T5223] x64_sys_call+0x19e6/0x2ee0 [ 132.868514][ T5223] do_syscall_64+0x58/0xf0 [ 132.868541][ T5223] ? clear_bhb_loop+0x50/0xa0 [ 132.868564][ T5223] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 132.868599][ T5223] RIP: 0033:0x7fe81478eec9 [ 132.868619][ T5223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.868640][ T5223] RSP: 002b:00007fe8131f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 132.868669][ T5223] RAX: ffffffffffffffda RBX: 00007fe8149e5fa0 RCX: 00007fe81478eec9 [ 132.868687][ T5223] RDX: 0000000000000055 RSI: 0000200000005480 RDI: 0000000000000004 [ 132.868701][ T5223] RBP: 00007fe8131f7090 R08: 0000000000000000 R09: 0000000000000000 [ 132.868715][ T5223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.868730][ T5223] R13: 00007fe8149e6038 R14: 00007fe8149e5fa0 R15: 00007ffe027cca78 [ 132.868751][ T5223] [ 133.167807][ T5237] netlink: 'syz.4.1966': attribute type 46 has an invalid length. [ 133.371132][ T36] audit: type=1400 audit(1759369563.920:402): avc: denied { read } for pid=5279 comm="syz.0.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.439311][ T5292] 9p: Unknown access argument : -22 [ 133.556095][ T5310] bpf: Bad value for 'gid' [ 133.624232][ T65] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 133.663876][ T5326] /dev/loop0: Can't lookup blockdev [ 133.754243][ T65] usb 7-1: device descriptor read/64, error -71 [ 133.766369][ T5337] netlink: 'syz.0.2004': attribute type 27 has an invalid length. [ 133.994254][ T65] usb 7-1: device descriptor read/64, error -71 [ 134.131380][ T36] audit: type=1400 audit(1759369564.680:403): avc: denied { create } for pid=5360 comm="syz.0.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 134.170787][ T5369] tipc: Enabling of bearer rejected, media not registered [ 134.224068][ T5383] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 134.234087][ T36] audit: type=1400 audit(1759369564.780:404): avc: denied { relabelto } for pid=5382 comm="syz.4.2024" name="file0" dev="tmpfs" ino=2822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 134.241394][ T5383] mmap: syz.4.2024 (5383): VmData 29077504 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data. [ 134.261416][ T65] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 134.296806][ T5387] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2026'. [ 134.405340][ T65] usb 7-1: device descriptor read/64, error -71 [ 134.494676][ T4602] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 134.507322][ T4602] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 134.515755][ T4602] CPU: 1 UID: 0 PID: 4602 Comm: syz.0.1722 Not tainted syzkaller #0 c28964d659af56c9aa0a1d789b6c5ee0e7b35bd1 [ 134.527317][ T4602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 134.537372][ T4602] RIP: 0010:current_umask+0x4e/0x80 [ 134.542592][ T4602] Code: 81 c3 78 08 00 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 70 d1 e5 ff 48 8b 1b 48 83 c3 0c 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 0c 8b 03 5b 41 5e 5d c3 cc cc cc cc cc 89 [ 134.562197][ T4602] RSP: 0018:ffffc9000343f5e0 EFLAGS: 00010203 [ 134.568276][ T4602] RAX: 0000000000000001 RBX: 000000000000000c RCX: ffff888131d09300 [ 134.576244][ T4602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.584220][ T4602] RBP: ffffc9000343f5f0 R08: 000000003e0539ff R09: 00000001effbffac [ 134.592207][ T4602] R10: effbffac00000000 R11: 0000000000000001 R12: ffff888137d88340 [ 134.600180][ T4602] R13: ffff888137d88368 R14: dffffc0000000000 R15: ffff888138bf2110 [ 134.608265][ T4602] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 134.617201][ T4602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.623789][ T4602] CR2: 00005555558864a8 CR3: 0000000123620000 CR4: 00000000003526b0 [ 134.631804][ T4602] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 134.639780][ T4602] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 134.647750][ T4602] Call Trace: [ 134.651023][ T4602] [ 134.653952][ T4602] vfs_mknod+0x486/0x6d0 [ 134.658203][ T4602] ovl_cleanup_and_whiteout+0x230/0x6a0 [ 134.663758][ T4602] ? __cfi_ovl_cleanup_and_whiteout+0x10/0x10 [ 134.669827][ T4602] ? lookup_one+0x180/0x2e0 [ 134.674360][ T4602] ? __cfi_lookup_one+0x10/0x10 [ 134.679214][ T4602] ? lock_two_directories+0x10e/0x230 [ 134.684590][ T4602] ? lock_rename+0x5c/0xb0 [ 134.689016][ T4602] ovl_do_remove+0x886/0xcf0 [ 134.693620][ T4602] ? ovl_set_redirect+0x780/0x780 [ 134.698647][ T4602] ? down_write+0xe9/0x2a0 [ 134.703062][ T4602] ? __cfi_down_write+0x10/0x10 [ 134.707908][ T4602] ovl_rmdir+0x1e/0x30 [ 134.711983][ T4602] vfs_rmdir+0x3e0/0x560 [ 134.716229][ T4602] incfs_kill_sb+0x109/0x230 [ 134.720845][ T4602] deactivate_locked_super+0xd8/0x2a0 [ 134.726248][ T4602] deactivate_super+0xb8/0xe0 [ 134.730948][ T4602] cleanup_mnt+0x3f1/0x480 [ 134.735364][ T4602] __cleanup_mnt+0x1d/0x40 [ 134.739777][ T4602] task_work_run+0x1e0/0x250 [ 134.744380][ T4602] ? __cfi_task_work_run+0x10/0x10 [ 134.749493][ T4602] ? free_nsproxy+0x223/0x290 [ 134.754176][ T4602] do_exit+0x9bc/0x2630 [ 134.758337][ T4602] ? __sched_text_start+0x10/0x10 [ 134.763366][ T4602] ? __cfi_do_exit+0x10/0x10 [ 134.767958][ T4602] ? __kasan_check_write+0x18/0x20 [ 134.773084][ T4602] ? _raw_spin_lock_irq+0x8d/0x120 [ 134.778206][ T4602] ? __kasan_check_read+0x15/0x20 [ 134.783234][ T4602] ? cgroup_update_frozen+0x160/0x990 [ 134.788613][ T4602] do_group_exit+0x22a/0x300 [ 134.793214][ T4602] ? cgroup_leave_frozen+0x16c/0x2b0 [ 134.798496][ T4602] get_signal+0x139d/0x14f0 [ 134.803001][ T4602] arch_do_signal_or_restart+0x96/0x720 [ 134.808548][ T4602] ? common_nsleep+0x93/0xb0 [ 134.813149][ T4602] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 134.819329][ T4602] ? __se_sys_clock_nanosleep+0x2fd/0x390 [ 134.825059][ T4602] ? __kasan_check_read+0x15/0x20 [ 134.830088][ T4602] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 134.836154][ T4602] syscall_exit_to_user_mode+0x58/0xb0 [ 134.841620][ T4602] do_syscall_64+0x64/0xf0 [ 134.846037][ T4602] ? clear_bhb_loop+0x50/0xa0 [ 134.850734][ T4602] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 134.856645][ T4602] RIP: 00fb:0x294e66b3c7c44cb4 [ 134.861450][ T4602] Code: Unable to access opcode bytes at 0x294e66b3c7c44c8a. [ 134.868835][ T4602] RSP: 002b:0000000000000000 EFLAGS: 00000202 ORIG_RAX: ce3d5c200518e753 [ 134.877258][ T4602] RAX: 6d02b596a6d6b2c6 RBX: 46b00e13ac8c17fa RCX: 1d6d567492f1521e [ 134.885236][ T4602] RDX: eb30e365dd53f3a0 RSI: c553273f825e1cf7 RDI: b331ef28487276fd [ 134.893214][ T4602] RBP: 9c8c87e20081ee76 R08: cf9d780a350b4549 R09: c7e58b697db8ef3d [ 134.901193][ T4602] R10: d68d02d45a22dc24 R11: 19b4d49ef33da9ed R12: 39cb75b6fa6cb3d1 [ 134.909171][ T4602] R13: a8d7b5dbf29d588f R14: 9b8908dcbb4f02b4 R15: 107b9d1451766018 [ 134.917154][ T4602] [ 134.920177][ T4602] Modules linked in: [ 134.924275][ T4602] ---[ end trace 0000000000000000 ]--- [ 134.931050][ T4602] RIP: 0010:current_umask+0x4e/0x80 [ 134.936367][ T4602] Code: 81 c3 78 08 00 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 70 d1 e5 ff 48 8b 1b 48 83 c3 0c 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 0c 8b 03 5b 41 5e 5d c3 cc cc cc cc cc 89 [ 134.960212][ T4602] RSP: 0018:ffffc9000343f5e0 EFLAGS: 00010203 [ 134.966405][ T4602] RAX: 0000000000000001 RBX: 000000000000000c RCX: ffff888131d09300 [ 134.974616][ T4602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.975978][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2040'. [ 134.982718][ T4602] RBP: ffffc9000343f5f0 R08: 000000003e0539ff R09: 00000001effbffac [ 134.991596][ T5422] erspan0: default FDB implementation only supports local addresses [ 134.999593][ T4602] R10: effbffac00000000 R11: 0000000000000001 R12: ffff888137d88340 [ 135.015644][ T4602] R13: ffff888137d88368 R14: dffffc0000000000 R15: ffff888138bf2110 [ 135.023654][ T4602] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 135.032673][ T4602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.039465][ T4602] CR2: 00007fd009bb4198 CR3: 00000001082b0000 CR4: 00000000003526b0 [ 135.047572][ T4602] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 135.055611][ T4602] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 135.063597][ T4602] Kernel panic - not syncing: Fatal exception [ 135.069965][ T4602] Kernel Offset: disabled [ 135.074291][ T4602] Rebooting in 86400 seconds..